Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: GftCujyGZe7NSsS3DVk18/GW3ONqb0ZQRH2WfP0E34Y=
Subject key identifier: 29:F9:06:BD:6E:69:D8:D3:73:CD:45:2C:35:5D:2D:4E:ED:D6:D5:A9
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 0198D7A94A943C01329678687781E4C4FC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 02F6
Signing time: Sat 23 Aug 2025 16:00:52 +0000
Manifest this update: Sat 23 Aug 2025 16:00:52 +0000
Manifest next update: Sun 24 Aug 2025 16:00:52 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: WaF47E+iZUFcUB8LMtD+4kiK2kxg8jxqWsiO1LzCCXY=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:4a:94:3c:01:32:96:78:68:77:81:e4:c4:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Aug 23 16:00:52 2025 GMT
Not After : Aug 24 16:00:52 2025 GMT
Subject: CN=29f906bd6e69d8d373cd452c355d2d4eedd6d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:ee:1c:8d:23:15:05:cc:d5:ae:1a:fb:e5:
20:cd:83:fc:40:79:f0:38:74:43:67:d2:0e:0d:1a:
1c:7a:d3:b6:68:f5:e4:0b:41:08:ca:f3:68:ed:e8:
23:d5:53:f7:1e:bf:77:f8:ad:e3:e2:e2:fd:b2:d4:
50:bd:b2:d4:99:e5:53:a8:17:27:a4:f6:06:8b:53:
a5:17:3c:ca:76:00:6d:70:4c:17:10:38:7d:7c:ab:
48:4e:70:84:b0:57:e9:79:69:2f:25:26:e0:f7:fd:
78:a1:93:f6:2b:92:54:39:16:d6:05:57:86:74:05:
a4:89:f3:cc:5a:66:97:2c:81:5c:b6:5b:57:7f:f0:
a8:f8:5d:26:ab:43:70:22:c0:b9:e4:be:1b:58:4f:
7c:b0:27:44:bd:ce:fe:4f:c6:a3:35:fe:22:54:38:
74:8c:32:7a:cf:23:fd:0d:aa:b7:d5:be:3d:f6:84:
16:54:a0:45:bc:a0:5e:cb:56:e6:62:54:35:8a:4f:
84:6b:51:19:30:84:b8:94:ec:f5:18:37:45:f6:42:
bf:de:16:df:5a:9e:cc:d3:59:69:54:79:48:9b:1d:
c2:4f:06:25:04:26:63:55:ad:11:92:c0:ad:31:42:
dd:79:83:0b:69:bd:c8:ce:2f:7d:43:91:5c:82:11:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:06:BD:6E:69:D8:D3:73:CD:45:2C:35:5D:2D:4E:ED:D6:D5:A9
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:d2:31:b3:cc:0e:8b:fe:67:3f:36:85:a1:56:8a:6b:e6:
c0:97:42:32:53:da:9f:e6:48:77:e7:9e:f9:7e:b2:d5:c9:12:
42:8c:96:6a:b2:6d:de:50:78:ba:c1:09:98:d7:94:61:34:0c:
aa:69:5f:86:d8:71:7e:83:06:e9:a7:8a:ea:02:5e:7c:51:17:
e5:60:b2:76:a5:1f:d9:54:da:4b:ff:ce:2f:d4:67:28:e8:4f:
65:10:45:51:81:94:cd:c3:40:78:9e:0f:d8:1d:85:a3:5e:7a:
a9:53:e1:cb:5c:02:ff:55:ad:dc:e3:7e:89:4c:d4:8a:19:eb:
43:2d:08:bb:e8:64:ad:27:9f:89:3f:96:7b:57:40:60:90:74:
18:4b:63:bc:4f:45:3e:1e:5a:8f:ec:b8:fd:bb:08:07:60:5c:
17:44:a5:6f:ec:b4:82:12:1f:84:23:46:95:b0:0a:d0:b6:18:
27:b9:33:d7:ff:a4:00:11:7e:1f:cc:5b:98:22:46:e1:d5:c2:
97:12:e5:df:e3:b9:08:de:97:a9:8b:18:ed:a4:64:f5:1f:1f:
b3:6a:f8:ef:24:52:15:72:ae:02:d4:86:41:00:90:20:fe:34:
df:ad:9a:c4:28:7c:e8:5f:8e:82:bc:ef:a5:60:08:67:ae:a1:
a8:8d:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:39 2025 by rpki-client