Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: zIiglGgFZjY65qlIejNh7bAIKYTD/2NJqZAY7o7g7pE=
Subject key identifier: 6E:4D:B4:55:80:57:7A:4A:98:6C:BA:D6:FE:DE:76:84:E8:31:C1:75
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 0199FFFE7D1AE16225B3AEF1E5AF1108529D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0BE1
Signing time: Mon 20 Oct 2025 05:01:32 +0000
Manifest this update: Mon 20 Oct 2025 05:01:32 +0000
Manifest next update: Tue 21 Oct 2025 05:01:32 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: T+a8NyTaQyjgpNup+MztQ5WLhQx6xX2BeDMne5ifSq8=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7d:1a:e1:62:25:b3:ae:f1:e5:af:11:08:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Oct 20 05:01:32 2025 GMT
Not After : Oct 21 05:01:32 2025 GMT
Subject: CN=6e4db45580577a4a986cbad6fede7684e831c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:19:13:86:68:51:25:cf:94:cb:f2:40:f0:3c:
e6:6a:0c:96:e7:90:c8:7c:25:c2:c7:8b:f0:19:a1:
cf:68:cf:d8:07:d0:b7:9f:97:91:96:56:4e:97:f1:
4d:ba:05:14:ce:83:be:3b:75:c8:f1:cb:ec:45:56:
54:89:d1:10:de:cc:f5:80:5b:5a:be:c5:de:53:f1:
8c:af:27:16:48:c4:e2:9b:8e:2a:fb:16:29:13:65:
6f:d0:3f:f1:5a:7f:4d:d2:57:50:29:00:2e:fc:90:
a4:4a:79:c9:4d:0b:cf:64:4a:12:80:e5:86:61:a7:
4e:9c:f2:1f:e7:af:3a:98:19:70:d6:0e:c5:f3:30:
20:c4:5b:8b:fa:6e:b8:d9:1a:12:11:0c:ba:53:3f:
6c:ea:cd:3d:ed:0c:d9:9e:db:07:41:b3:cb:29:69:
34:06:8d:e0:f1:71:95:00:e3:0b:ba:94:02:ad:84:
67:65:2a:fd:4a:ab:ff:a9:4a:54:b8:6e:63:a3:84:
de:0d:1b:df:9a:68:b9:c7:67:c8:30:6d:d1:91:5e:
d0:a7:d4:44:43:91:28:d3:15:33:6c:fe:69:10:cc:
5e:3f:fd:13:e1:7e:bd:71:2f:85:ef:9c:9d:fc:fa:
2a:71:28:b9:77:ce:3a:c4:47:41:0c:08:4b:3d:73:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:B4:55:80:57:7A:4A:98:6C:BA:D6:FE:DE:76:84:E8:31:C1:75
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:8f:ad:d5:a6:b7:6d:68:b5:2f:a6:74:cd:31:69:e7:1e:
b3:61:ab:ef:76:3e:48:d2:f7:5b:0a:3a:62:9e:fc:3c:c5:08:
f3:f8:55:45:44:cb:0d:a4:78:17:c9:b0:66:68:e3:dc:04:f1:
b3:4e:ba:6f:15:d2:64:6c:bf:69:5c:d6:8d:01:4e:72:87:f6:
3b:f1:d1:f0:b6:98:ab:bd:cd:72:8b:39:40:0d:c5:8b:ea:20:
64:a2:fa:c6:15:f9:89:5b:0e:34:88:a2:a7:92:54:9d:90:e0:
f8:c5:50:cb:fb:ff:84:63:e9:39:50:e6:c8:c2:29:11:a0:1e:
73:88:f8:ac:06:45:5a:a2:8b:dc:ad:37:bd:89:81:f7:e8:e0:
76:83:70:80:52:fc:e4:d4:56:14:ca:63:93:bc:d9:34:94:dd:
22:b0:fe:b6:c2:6d:d5:33:bc:d2:6b:42:2f:c7:97:8c:e3:09:
cc:e4:1a:97:4e:87:a6:b0:20:65:e8:05:0a:57:51:02:a6:df:
1e:22:7e:9b:b4:2e:2a:50:b0:38:5a:3f:a2:0a:b6:89:ae:fc:
1b:95:15:29:2f:a5:f3:97:57:0c:15:7e:87:e6:a2:e2:98:36:
e0:c6:ab:a7:bb:bd:48:1e:0d:11:2e:73:e2:fa:8b:52:7f:97:
bf:0b:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:44 2025 by rpki-client