Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: ZFzDxHcJZKNk8StKEa2cnpG0lL0C0OAtiUB4hegYol0=
Subject key identifier: A4:79:9E:80:B4:FA:8A:78:3B:D9:99:A8:C4:64:83:4F:F9:6C:A0:C5
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0198D4E08B4512ABD7B73B85D0BF268CA8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 090A
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: D0vQS7M1bz0xG171ezecdtzKD4lyEt73WUvv7k6o3hc=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8b:45:12:ab:d7:b7:3b:85:d0:bf:26:8c:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=a4799e80b4fa8a783bd999a8c464834ff96ca0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:62:65:5d:b6:b5:b1:e8:e7:31:e2:c9:26:
c5:76:c0:eb:2b:4b:c7:d3:ff:b8:c4:07:f6:64:cf:
ab:9c:54:53:30:fc:dc:ba:36:eb:a8:69:22:70:fa:
be:71:52:2b:91:2b:80:7e:c5:a8:59:42:d9:aa:27:
83:89:e5:c5:2b:5d:e0:63:88:64:61:01:90:00:a9:
f8:0d:34:29:f1:58:0d:bf:70:42:1b:28:f3:c3:74:
f9:43:fb:29:48:19:85:00:fa:41:c2:94:51:1a:fb:
2c:a5:db:0a:a5:cf:ae:6d:d9:50:34:e5:ef:69:bb:
a0:00:ab:2f:db:d5:80:a2:11:3a:de:82:c9:6e:2e:
96:7f:8c:67:f7:d8:f1:57:0d:56:0c:5c:a3:70:f9:
77:8f:48:41:43:4b:3c:b7:ba:ec:b5:d0:3c:06:77:
6d:99:83:e8:9e:86:40:a7:f7:c5:07:e8:11:2b:67:
a9:be:a1:36:ac:46:ad:be:0a:80:3e:80:75:3e:8a:
29:ec:bc:cb:26:76:77:df:5e:74:8f:72:85:f5:2b:
5c:df:9b:e0:63:63:e4:3f:c9:a1:7b:42:08:fa:7b:
0d:27:5b:d1:56:2d:a7:88:83:27:bf:ef:83:8d:ff:
a0:2e:23:7a:02:fa:fb:3f:f2:a0:d1:ba:c6:61:5d:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:9E:80:B4:FA:8A:78:3B:D9:99:A8:C4:64:83:4F:F9:6C:A0:C5
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:53:f3:8b:47:f0:fb:59:f7:36:32:32:66:b6:32:23:07:
3c:32:d8:70:86:96:5a:6d:d7:8e:c4:94:5b:29:76:80:6d:f7:
27:38:a2:27:fc:85:68:3d:3b:e5:df:11:7d:1b:84:ac:cf:b0:
e0:2a:10:74:a0:a5:c9:d4:cf:06:2a:7c:d9:6c:f7:47:3c:62:
27:ed:f0:f5:84:4e:b2:44:a1:8f:c0:3c:a5:be:49:9d:d3:e9:
c8:60:70:54:c7:15:f8:c3:1d:33:c4:33:19:c0:32:8a:14:8b:
b4:36:a8:9d:96:24:f4:c6:43:4b:9c:57:87:91:36:53:90:fc:
e5:e1:64:6d:d1:04:11:56:d6:ec:27:8c:48:e1:dd:37:6d:1e:
01:73:91:4e:f7:f8:be:6c:00:db:b5:34:1f:25:15:5d:6a:24:
97:9c:95:e3:f7:70:35:78:fd:39:4a:60:a6:6b:dd:dd:74:76:
76:db:19:a5:19:8c:a6:0d:ae:76:42:46:aa:ce:1c:c6:71:31:
71:34:3e:b4:60:d1:5a:b7:0e:b4:9f:63:c1:cd:be:a4:ce:e7:
4c:52:e5:f3:11:c6:3f:f9:a9:4e:a0:dc:7e:13:e8:ed:ee:49:
0d:e3:2b:12:9e:c4:61:22:f9:61:04:82:5f:34:7c:70:f9:65:
3d:84:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:51 2025 by rpki-client