Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: XRP8nXcUOxmzzd8XjJ5fYi+d9MQTR4toqXoTJdCy19M=
Subject key identifier: BF:97:F6:4B:EF:C1:07:A4:03:28:D8:C5:31:A5:EC:5B:84:C5:3A:5D
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 01992330F1BCF69E6CF07316965594089589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1254
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: tvTOZ2X3YCeZvVnfPGpb9m5bpeskzfa0Upi9vehaof0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f1:bc:f6:9e:6c:f0:73:16:96:55:94:08:95:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=bf97f64befc107a40328d8c531a5ec5b84c53a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:fc:a1:8c:8e:36:0b:0d:8e:7e:97:82:79:
bc:69:c6:1c:7e:bb:b2:3d:dd:13:4b:42:ed:bf:a8:
ab:ed:3d:7c:9e:dd:7b:5d:6c:3d:f6:d9:96:59:f4:
c6:df:52:e3:48:07:b1:1c:91:cd:db:ea:d8:23:e2:
33:90:33:5a:d5:79:f8:35:82:ac:12:c2:64:04:99:
2d:e4:c2:a7:91:0e:fd:8a:14:ff:f1:50:fa:3b:dd:
5d:99:9d:15:10:a6:24:de:be:8f:10:1e:81:7c:22:
9e:98:f7:06:4e:fe:d1:c3:a2:89:e0:9e:c9:a2:84:
0c:9d:88:60:08:4f:6d:72:cb:30:d5:51:97:6d:63:
bb:86:bb:2a:c9:37:62:9a:94:cd:f5:f3:0b:22:0d:
7c:c5:27:54:5c:6b:ea:85:0f:53:ff:b1:78:d7:05:
52:92:af:84:54:e8:28:a2:0a:cb:df:ef:f7:f7:a5:
76:84:13:29:d5:6f:52:88:55:e8:c0:4d:9a:f0:79:
58:a4:bd:fd:6c:2a:34:d8:ff:c2:08:b9:bb:5b:e3:
1d:90:c9:93:66:c1:2d:a8:5a:d0:91:1e:72:0d:bd:
d1:32:55:8b:c5:5f:ef:eb:02:89:1c:77:dc:ec:e5:
e6:3f:e7:fd:01:d7:29:58:b6:19:d2:72:23:f8:ec:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:F6:4B:EF:C1:07:A4:03:28:D8:C5:31:A5:EC:5B:84:C5:3A:5D
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:6b:1a:d4:f1:2d:1b:89:30:ab:25:a8:24:d7:08:d0:20:
97:ba:4a:0a:67:a1:ab:cf:c1:f5:12:0a:e0:42:5e:51:9f:e4:
57:88:e9:46:44:7a:fe:5d:11:c3:75:d6:b4:be:c6:8b:8e:a2:
a1:f8:8a:f1:a1:14:5a:f0:70:c3:0a:03:73:3a:54:68:55:5e:
2c:cb:4a:be:7c:61:73:0e:12:d2:61:50:f7:3e:fa:b2:7b:77:
67:27:f4:bb:7e:4e:5b:06:4f:57:e7:ee:06:96:5a:f2:4b:87:
70:dc:b1:5c:3d:b2:44:2e:81:b1:f3:4c:b2:9d:53:9a:fa:8c:
bb:43:f8:e4:28:c1:0b:b2:cd:4b:70:80:92:3c:60:4d:f9:33:
fc:36:f9:95:17:b3:92:48:38:4d:b2:08:ea:db:ce:27:31:8b:
30:ba:35:ab:72:87:dd:78:84:af:14:75:23:ee:c8:52:c3:4d:
56:ac:50:bf:e1:f1:fd:be:f2:a5:38:02:d2:c9:63:80:58:49:
7a:56:5c:f6:5b:aa:87:5e:a6:bd:7d:f1:94:47:2b:c3:2f:55:
df:b4:3e:56:5e:61:d0:0d:c5:98:b4:f5:c5:52:0c:0a:27:68:
b4:3e:b4:c3:fb:67:26:19:6f:d8:60:7c:e5:7e:e1:c4:83:ac:
f7:8b:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client