Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: ZP/AatL9v9WCEXhpTYzMSfrnOqyU4AGhQGg8GCPsxRM=
Subject key identifier: 93:A5:9B:09:24:96:62:14:18:3E:7D:B5:83:71:DC:D0:26:9D:20:D1
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0198D884F928B5059EEFDC4C58F4FB4A95BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0B48
Signing time: Sat 23 Aug 2025 20:00:49 +0000
Manifest this update: Sat 23 Aug 2025 20:00:49 +0000
Manifest next update: Sun 24 Aug 2025 20:00:49 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 7vhYKW5ueAI8sPk4hkrCFEgRbwmvPlNx7Fq/pUuGpHk=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:f9:28:b5:05:9e:ef:dc:4c:58:f4:fb:4a:95:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Aug 23 20:00:49 2025 GMT
Not After : Aug 24 20:00:49 2025 GMT
Subject: CN=93a59b0924966214183e7db58371dcd0269d20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:7e:87:bc:c8:63:7b:61:a7:14:49:d0:d2:
54:71:fb:8c:9f:32:e8:f5:e1:72:91:fa:2b:85:76:
13:1a:bc:76:93:bf:a5:e4:d0:18:d4:01:2d:74:d0:
11:d5:d7:53:a0:aa:df:60:db:a1:07:de:84:6c:d4:
53:a7:6b:49:f8:07:50:10:ae:de:bb:7e:f6:07:83:
88:c7:ab:e8:26:8d:c4:07:72:8c:b4:ab:16:49:3c:
41:42:d5:f5:27:24:e2:40:5b:14:af:28:b2:00:e2:
44:a2:5b:b5:41:84:f9:e0:55:fe:49:a5:6b:64:08:
de:09:0a:4a:cd:81:b3:00:a6:42:27:fb:5e:ca:42:
c3:04:ef:0f:cd:47:e5:de:2e:3f:74:a1:27:ae:d6:
67:ae:ee:bc:b5:f2:4e:c7:c2:42:34:3a:8c:1e:6b:
0f:7c:82:d3:01:0a:f2:3e:80:51:bb:5f:cf:2d:54:
ff:f6:77:18:2e:07:cd:24:ba:68:a2:dc:47:b9:42:
8e:02:61:8f:17:e2:35:26:4c:7e:73:cd:a8:81:45:
48:b7:31:67:f6:7c:1d:88:4e:07:e3:9a:af:6d:d2:
f0:45:92:23:d4:ba:fd:b9:c3:4b:11:5e:1c:99:5a:
0c:31:77:09:28:a1:25:c2:24:dd:4a:9c:4c:67:70:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:9B:09:24:96:62:14:18:3E:7D:B5:83:71:DC:D0:26:9D:20:D1
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2b:f3:6a:1c:0b:c0:1c:dd:81:81:36:18:0a:31:11:83:8c:
e0:80:6f:b6:5b:97:a3:c0:15:f4:c5:80:97:b0:e6:f0:4e:1a:
2e:ab:5f:7b:6d:ac:8b:a1:4f:69:44:b7:ce:d1:96:0a:39:9f:
7b:62:b2:7f:56:a7:5f:27:84:68:8a:80:d7:83:35:c1:dd:43:
c6:05:75:ab:91:98:63:02:45:bf:90:5c:af:54:5a:b5:4e:23:
a5:5f:a7:48:46:d6:86:67:fa:45:60:22:22:76:a3:3e:3a:b0:
d5:94:3c:4b:a2:05:97:58:e3:5d:40:30:e6:71:f8:eb:f4:5a:
c7:ff:82:e7:0c:99:b9:b0:dc:90:84:ed:a2:50:18:12:95:68:
ab:38:15:a6:df:ec:ba:46:e6:ed:fd:2d:bb:28:fb:64:62:55:
41:d9:6f:3f:e9:7d:41:9e:cb:d8:b9:7c:2e:a5:be:96:8f:11:
e4:0e:da:5a:e8:b5:f7:cd:f0:dc:4e:25:0b:2e:88:62:29:6c:
76:96:8c:11:0c:c7:9d:38:56:0c:42:1c:da:f2:b0:8d:04:e2:
18:83:bd:01:57:ef:41:09:e8:c1:72:3d:03:39:a6:5a:ca:37:
38:bc:f1:a6:90:a6:9b:31:49:4a:c2:c5:01:81:ba:f2:05:c4:
f6:bd:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:51 2025 by rpki-client