Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: h6H/IiTPW5VgrJJ+GrxI4Ersh7eXVJvXaNHqd1iyOx4=
Subject key identifier: 70:11:CD:B3:9D:BA:43:8D:05:B7:94:7D:CC:06:76:BB:78:66:2D:A9
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 0198D4044C27DF3754D0CAD4F1C0B8C5F0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0995
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: uBPMePZq62UwyEmcRxnkoMxPmjM1g1E16kmFaKagGMc=)
2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4c:27:df:37:54:d0:ca:d4:f1:c0:b8:c5:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=7011cdb39dba438d05b7947dcc0676bb78662da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:f6:bd:8c:aa:58:6d:dc:7e:12:67:95:70:
dc:e5:cd:2f:3f:41:f7:22:cb:a6:75:a3:d8:28:b9:
49:15:7b:d6:ea:37:a5:e2:db:7f:f1:3c:02:2a:79:
d7:64:8f:40:91:c0:09:24:88:47:d4:d6:b9:0d:b6:
bf:d1:1e:46:7a:19:b7:1b:7f:12:27:c5:3a:c9:7a:
86:bc:91:14:f4:97:76:b0:e1:26:28:88:e1:a7:b0:
a0:a7:27:54:d6:bf:b5:1e:90:71:d5:31:df:c4:47:
01:2d:26:45:25:b0:e7:b2:f3:e3:dc:d8:df:d5:77:
6d:fd:52:2f:d6:2e:44:e4:3a:01:44:8c:53:c7:8b:
b2:b7:69:78:b1:3d:9b:25:ad:0f:3d:d6:08:36:13:
b5:b8:9b:94:45:2d:9b:21:66:89:fa:3a:e0:41:e7:
6c:e9:d6:82:08:9d:bf:d1:f3:6c:69:99:c7:71:41:
dd:05:b3:84:78:bc:bd:0e:2c:64:e7:c4:97:30:3f:
e9:f8:87:0b:08:b9:20:55:1a:a9:71:4c:28:e2:06:
04:d5:37:96:5e:33:51:ad:41:85:2c:4e:af:b6:fb:
62:11:ea:c8:de:2b:fd:8f:4e:76:1d:75:fd:bc:29:
4e:75:aa:52:39:92:7c:bc:09:48:d5:9f:63:92:35:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:CD:B3:9D:BA:43:8D:05:B7:94:7D:CC:06:76:BB:78:66:2D:A9
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:a3:2f:bc:f9:8d:98:da:e5:4b:a1:c3:c9:64:5f:64:d7:
03:bd:75:44:a8:05:e9:c1:e7:3f:f0:32:50:92:87:82:f8:34:
0e:f3:63:43:f7:c9:f8:41:81:4a:dd:cf:85:02:d3:3b:af:e0:
cc:df:a6:b6:5d:1b:b9:7c:5c:91:7b:1a:60:ba:c5:74:41:08:
9a:db:b5:74:7b:1a:5e:a8:be:1f:00:8a:f5:03:7c:0a:11:7a:
8d:07:19:b5:97:66:7b:cb:f4:46:f2:c1:57:a0:cf:78:5c:4a:
f4:bb:7a:01:b3:e7:0e:02:df:e2:45:70:d3:de:31:eb:ec:9a:
69:ef:7a:d6:8d:85:03:5d:dc:25:f9:af:ad:e1:58:8b:ca:f0:
74:48:c2:d5:a5:ad:15:0c:24:60:e3:37:10:ae:21:80:80:bf:
97:3c:b4:09:c0:7d:cf:39:55:25:5f:53:a8:4a:dd:fd:06:16:
3c:14:2f:41:4d:ef:f1:c3:44:78:b0:a3:37:a0:88:cc:0d:82:
85:fe:65:3b:35:bb:86:fd:f9:86:fe:75:54:af:65:61:06:7f:
de:8e:4e:ef:14:93:4c:06:84:0f:34:04:cf:9c:cb:75:52:32:
11:e9:f2:20:4f:07:49:da:3f:55:22:8c:83:74:68:03:52:3d:
95:7d:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:36 2025 by rpki-client