Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: Gydy8Er8RXGsTXLeQ2txgJb8uIQrl4RgQq/XL2r0iQc=
Subject key identifier: C9:10:B1:E6:E4:1A:CE:0B:6A:3B:AE:60:F6:B4:A2:28:F6:04:F7:F4
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0197B6D79AB7F00A059403E2B6DBC4D73EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0AB2
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: rC3r/a4dxwPrg5DsPojQx55DIKeldTjFpaMWdiZnLK4=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9a:b7:f0:0a:05:94:03:e2:b6:db:c4:d7:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=c910b1e6e41ace0b6a3bae60f6b4a228f604f7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:3d:05:43:9c:5c:0f:d7:99:b9:8f:f3:4f:
cd:06:41:76:c6:c2:1a:b6:1a:56:52:b4:c5:ff:1c:
ed:83:bd:d5:90:7a:32:a4:ee:62:18:dc:23:7c:38:
61:cb:d6:01:0a:db:c2:08:5f:19:b0:71:8e:8e:21:
80:00:f9:d1:f7:f1:83:6b:65:b7:32:e4:30:7a:d0:
1a:a7:84:e0:b0:67:10:47:4a:67:d5:00:30:68:9f:
50:38:96:84:8f:ec:50:41:92:60:a4:c4:d9:8b:25:
80:db:46:7a:51:a2:c9:ac:e5:4b:b6:ce:dd:de:b9:
53:81:0f:05:46:76:d2:a3:8c:df:dc:c0:62:6e:40:
a3:6c:54:f3:80:24:d8:ee:db:38:48:f4:67:cc:11:
98:5e:97:20:8b:4d:d9:37:7a:01:f5:f7:52:71:b3:
12:4e:54:fb:ff:c7:72:e1:21:af:cb:9e:bd:75:89:
d1:23:42:1e:ff:dd:ea:af:c8:b0:bc:f2:0a:98:c8:
98:62:57:fd:ed:82:9e:31:7e:be:c8:8b:f0:d4:15:
7a:a5:1e:15:6d:27:1a:25:5d:86:06:ac:8d:e6:37:
1c:63:6e:4a:61:da:84:06:08:89:5b:1f:e5:3d:c0:
ba:55:01:b4:26:10:7e:f5:5a:d4:15:25:3b:e0:ad:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:B1:E6:E4:1A:CE:0B:6A:3B:AE:60:F6:B4:A2:28:F6:04:F7:F4
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b8:fb:41:83:c2:a6:f4:b1:ae:61:d7:b2:10:a0:2a:5b:e1:
e3:9b:12:46:83:91:78:56:00:88:e2:f2:33:a3:52:5d:96:3f:
a3:ae:bb:14:3c:61:d7:90:75:f5:47:47:8f:b6:c0:cd:07:bb:
4a:5a:33:f3:f9:65:23:29:0f:d3:d3:9c:a6:a5:eb:4b:0d:ec:
20:ce:46:7d:73:1e:58:b2:9f:05:40:7b:42:53:e6:a6:ed:c1:
b7:c6:83:d2:6a:67:2a:e2:8e:29:d6:f8:a7:e5:a8:38:07:21:
5a:b9:80:6f:f1:bb:a6:3d:3f:01:a3:e5:d2:03:34:e1:e8:44:
7d:a2:29:79:93:c2:67:7e:37:b9:03:a9:77:fe:3f:ba:dd:80:
96:ef:d0:07:6c:00:9b:4b:38:73:66:6b:04:0a:12:13:b1:83:
43:d1:8d:fb:1d:b4:e8:e8:79:02:ad:f5:ca:ce:6d:42:de:5e:
6b:61:ef:9b:1e:fa:df:6a:c7:11:6b:bd:f4:e9:14:d0:74:d8:
b8:d7:2c:d4:68:61:78:c8:d1:89:d4:a1:f6:a2:bc:14:31:99:
a1:b5:b8:eb:ff:69:95:d0:83:76:6b:5a:30:58:06:77:0d:c1:
1f:83:2c:2f:3d:45:55:3e:21:11:77:da:03:0c:b0:f3:0c:79:
94:62:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:23 2025 by rpki-client