Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: oRDNgXJ6Ad3fNRnrNYLcfRxvDdO6J2xHw8WA3IHEQAE=
Subject key identifier: CF:A1:F9:C7:BA:F8:4C:CC:1D:0A:D9:38:2F:27:28:61:87:11:B3:88
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 0199239EC77752800413C5215D48972B17FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 1338
Signing time: Sun 07 Sep 2025 10:00:32 +0000
Manifest this update: Sun 07 Sep 2025 10:00:32 +0000
Manifest next update: Mon 08 Sep 2025 10:00:32 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: 2R7TivDokz4XHeimwDUkWfOF4I0bH4sQmTcnwEE7fB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c7:77:52:80:04:13:c5:21:5d:48:97:2b:17:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Sep 7 10:00:32 2025 GMT
Not After : Sep 8 10:00:32 2025 GMT
Subject: CN=cfa1f9c7baf84ccc1d0ad9382f2728618711b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:22:97:49:d3:d6:1a:c1:38:fe:88:3d:b6:
74:b6:1e:5f:fb:14:c1:85:82:0f:3e:15:71:27:81:
9e:e4:61:cf:87:99:47:ec:e4:ed:34:d5:e7:49:5c:
4f:2b:47:93:b0:3f:da:16:26:f5:50:7b:85:f9:c6:
6d:fa:22:e8:62:05:a8:d9:24:88:48:45:85:d3:7a:
61:10:45:0b:93:7a:58:e7:97:67:13:0d:53:03:01:
79:f8:64:25:41:08:52:c7:b6:c3:b2:0a:bf:b9:9d:
ec:e6:b6:b2:de:6d:4f:ce:73:bd:b4:bd:01:f5:aa:
cc:04:bc:04:22:32:e7:d8:78:e1:ea:79:54:26:5f:
30:42:68:c6:f0:48:c4:fa:13:82:e9:f7:48:42:35:
a9:c4:40:d5:77:b0:31:60:10:98:49:45:42:e8:8f:
4a:70:17:15:68:23:b1:e4:5c:dc:dd:c7:ab:a4:61:
29:40:bc:fb:2f:2a:27:9f:c1:74:3d:a6:3a:94:8e:
85:d4:e6:40:6e:ba:6e:a0:c6:4a:56:82:e3:5b:ab:
da:24:9d:c0:c0:8b:e0:83:f6:ba:22:bc:c8:79:83:
17:ee:cc:60:e5:e9:6f:1c:dc:da:3b:a0:1c:c4:f7:
5a:6e:5e:98:93:d2:25:e3:88:d5:d3:32:2e:0c:b8:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:F9:C7:BA:F8:4C:CC:1D:0A:D9:38:2F:27:28:61:87:11:B3:88
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d0:47:f6:10:d6:4f:16:b9:6f:ed:e4:81:d4:bd:c3:6c:3e:
66:33:cf:e8:ef:cb:b6:63:10:ce:f4:50:20:a6:20:b7:36:08:
9b:64:24:0e:88:ab:f4:6b:e6:52:95:8b:47:15:60:7f:63:6f:
12:9b:6e:1f:71:2c:ed:b9:7a:3f:0b:1e:61:29:27:0d:e4:70:
a4:db:fd:e7:4e:b8:7f:b5:1c:15:75:f4:97:d3:53:02:fe:dd:
5d:47:f3:3e:ac:79:0d:8e:e7:bf:56:d1:af:61:f3:dc:48:26:
85:86:eb:19:f7:61:32:77:b6:87:6b:55:d2:01:46:f6:d7:27:
38:96:92:c9:9f:fb:fe:1e:14:78:bb:77:4d:38:b7:6b:d3:81:
2d:79:05:42:aa:db:02:45:c9:25:43:ab:7d:a2:24:32:0b:75:
94:14:4c:30:3f:5b:41:ec:93:7f:eb:b3:ab:9e:74:b5:b0:ab:
56:49:ca:71:5f:1e:7d:92:28:95:47:09:9e:d9:07:2e:71:47:
0b:d9:11:ba:89:d7:de:a2:69:2e:41:9e:3b:e8:20:b2:f6:fc:
64:9c:e7:a3:9a:d4:6f:de:10:68:a6:a4:02:43:89:db:90:4c:
7d:c8:7d:43:99:09:b2:c9:3e:ee:c9:cb:5b:05:09:f5:b3:5e:
ce:d1:91:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:36 2025 by rpki-client