Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: AgPb/9b4Nj5kobsexr4cnNGkS0wU83ofRhtaZLEyyCs=
Subject key identifier: 26:F2:2A:5B:9E:54:9C:A6:B4:98:00:1E:81:23:92:0D:2E:2B:5E:39
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0197BAEB2590B432255F6C1459EFB1B7E212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 0878
Signing time: Sun 29 Jun 2025 09:01:02 +0000
Manifest this update: Sun 29 Jun 2025 09:01:02 +0000
Manifest next update: Mon 30 Jun 2025 09:01:02 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: ubNayb6nqfYO06bp4488JVeauGJft2QCRRvBPKGu7Dg=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:25:90:b4:32:25:5f:6c:14:59:ef:b1:b7:e2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jun 29 09:01:02 2025 GMT
Not After : Jun 30 09:01:02 2025 GMT
Subject: CN=26f22a5b9e549ca6b498001e8123920d2e2b5e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:86:62:00:f3:2f:07:cb:bd:90:55:0c:9e:
e2:c7:44:0c:29:22:dd:80:bd:4c:6d:4c:60:f9:bf:
b8:6b:17:12:48:e1:d8:9f:ef:01:17:25:94:f2:c1:
a3:77:5c:36:ba:7e:1f:60:38:12:5e:51:38:cf:f8:
9a:13:52:a0:4f:4d:62:52:cb:3f:aa:ee:d9:61:67:
d6:ef:c8:96:1d:70:7c:08:3a:68:9c:2d:f8:1b:a0:
af:26:67:9c:45:48:5b:dc:a4:fe:f9:9a:3f:0c:cd:
e7:bf:4b:c6:3e:5c:61:0a:9d:ce:21:0c:5f:6a:3e:
5f:3c:47:a2:48:dc:7f:25:8b:a7:73:47:67:6b:4a:
5f:a3:1d:83:28:32:c9:5d:6f:34:ed:df:e8:7e:34:
5a:03:f0:8f:f6:c3:ec:6c:c3:16:4b:85:d6:8e:6f:
ba:bb:1c:e7:1f:d5:d9:66:e8:1b:3c:3e:c8:2a:c9:
d4:03:9f:ca:d3:8a:a7:1a:05:ff:f1:46:8c:06:9c:
3d:78:15:2a:23:a1:8e:c6:4e:c9:67:0e:33:74:27:
03:6f:03:dd:54:21:79:e7:4d:1a:cc:2e:65:07:cb:
50:5d:33:c5:27:e9:38:9a:fd:45:15:74:f9:21:a0:
4a:d2:aa:f0:78:40:33:08:90:24:8e:51:4a:64:50:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:2A:5B:9E:54:9C:A6:B4:98:00:1E:81:23:92:0D:2E:2B:5E:39
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:11:dd:5c:84:88:b4:fc:b7:c0:0b:9d:11:00:0e:3d:69:
22:aa:78:37:64:85:83:7d:c3:31:f1:b4:16:a3:b4:ce:0a:2e:
f6:15:77:24:3a:6b:ac:07:8d:6f:f7:72:69:9e:50:1f:84:6c:
75:b5:e6:dc:12:44:d0:e5:6b:09:f2:0e:bf:c8:9a:10:f8:ee:
8b:62:4a:96:39:03:58:9c:14:ae:e4:f1:33:8b:6d:a3:24:55:
a3:37:b8:02:0a:3e:58:bd:b7:02:2d:e7:f8:1d:c8:55:13:73:
e0:af:db:d8:d0:cd:10:3e:db:13:fe:a0:2e:9d:c8:3a:7e:df:
0a:c2:f3:0b:73:34:9f:da:7d:51:3b:13:1e:02:0b:49:0b:43:
fe:1d:6e:e4:0e:cb:38:27:96:37:a6:2f:64:2d:27:57:65:39:
b4:e4:0e:71:98:b3:97:65:5b:d7:a8:07:a4:5b:f3:80:59:6c:
00:f4:99:e3:d9:b3:86:3f:72:dd:82:21:50:8e:17:66:70:26:
b1:71:f0:3a:41:0b:cd:c2:66:b5:7c:95:7e:29:2d:2b:56:77:
1c:52:5f:6e:0a:35:ce:c0:d9:f4:91:b0:36:32:e9:e5:06:e3:
ef:74:76:39:ea:f4:70:4d:75:b3:2d:0f:fc:a1:92:14:d7:07:
d5:41:43:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe66yWQtDIlX2wUWe+xt+ISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjUwNjI5MDkwMTAyWhcNMjUwNjMwMDkwMTAyWjAzMTEwLwYDVQQD
EygyNmYyMmE1YjllNTQ5Y2E2YjQ5ODAwMWU4MTIzOTIwZDJlMmI1ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMSGYgDzLwfLvZBVDJ7ix0QMKSLd
gL1MbUxg+b+4axcSSOHYn+8BFyWU8sGjd1w2un4fYDgSXlE4z/iaE1KgT01iUss/
qu7ZYWfW78iWHXB8CDponC34G6CvJmecRUhb3KT++Zo/DM3nv0vGPlxhCp3OIQxf
aj5fPEeiSNx/JYunc0dna0pfox2DKDLJXW807d/ofjRaA/CP9sPsbMMWS4XWjm+6
uxznH9XZZugbPD7IKsnUA5/K04qnGgX/8UaMBpw9eBUqI6GOxk7JZw4zdCcDbwPd
VCF5500azC5lB8tQXTPFJ+k4mv1FFXT5IaBK0qrweEAzCJAkjlFKZFC0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbyKlueVJymtJgAHoEjkg0uK145MB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoIR3VyE
iLT8t8ALnREADj1pIqp4N2SFg33DMfG0FqO0zgou9hV3JDprrAeNb/dyaZ5QH4Rs
dbXm3BJE0OVrCfIOv8iaEPjui2JKljkDWJwUruTxM4ttoyRVoze4Ago+WL23Ai3n
+B3IVRNz4K/b2NDNED7bE/6gLp3IOn7fCsLzC3M0n9p9UTsTHgILSQtD/h1u5A7L
OCeWN6YvZC0nV2U5tOQOcZizl2Vb16gHpFvzgFlsAPSZ49mzhj9y3YIhUI4XZnAm
sXHwOkELzcJmtXyVfiktK1Z3HFJfbgo1zsDZ9JGwNjLp5Qbj73R2Oer0cE11sy0P
/KGSFNcH1UFDLw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:43:01 2025 by rpki-client