
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: GSXgl7QNSdmdb+HvNHe00uT30vsT3H4SKg31sAvApwk=
Subject key identifier: 5B:FB:A1:09:FB:AE:80:AA:82:B3:A3:AE:92:72:5E:DB:83:46:F8:DA
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 0198D54EAA23AB42C1022469525B50AFF89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 09BA
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: 2S/SlxcwI9XIShi0HZWlwHHaMWIJv9H2kIkpTKmERq0=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:aa:23:ab:42:c1:02:24:69:52:5b:50:af:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=5bfba109fbae80aa82b3a3ae92725edb8346f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:f8:88:69:b8:06:dd:65:ae:50:0e:ed:f1:
b6:a2:27:51:18:0f:e3:a6:d7:47:b4:2d:1d:b6:44:
87:50:61:75:09:69:13:20:0d:17:cf:03:5e:45:ca:
0e:b8:fc:5e:ea:17:cd:cb:b7:8e:f2:43:78:3a:ee:
af:a0:4b:c9:13:c2:1b:f0:8d:5e:ff:a8:87:d1:fe:
5e:16:2c:74:4b:a5:10:26:4e:1c:3a:2f:67:32:c3:
79:e0:44:22:1b:02:bf:27:7c:bf:b3:63:27:49:40:
16:51:45:16:37:8a:6b:33:8d:71:ca:9d:2a:c1:a6:
0e:52:78:78:48:2f:d4:28:9a:0d:99:d8:36:99:28:
df:b2:3c:66:b0:e5:20:bd:22:a7:f4:76:93:1a:e5:
b7:47:4e:8d:98:c3:f1:d4:8d:e6:73:6d:93:f2:64:
8d:14:38:35:71:72:ed:80:f5:16:61:8b:a3:08:be:
72:4a:b1:70:e8:61:68:22:a6:4e:d9:c9:e7:eb:fd:
d0:55:cf:17:4e:90:52:ac:3e:e8:8c:c6:85:72:52:
80:4d:ba:66:24:2c:01:fe:e3:b1:d1:de:c2:e3:a1:
c5:2a:84:02:c3:00:1b:57:23:7c:65:65:83:63:68:
47:17:2a:bb:ab:c4:4c:0a:51:5d:d4:1e:67:c5:0b:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:A1:09:FB:AE:80:AA:82:B3:A3:AE:92:72:5E:DB:83:46:F8:DA
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:72:79:81:e2:cf:87:b4:35:91:2e:82:11:21:e0:13:0c:
ad:fb:08:61:1a:e9:57:a3:ff:db:cf:d8:4a:64:8e:1b:16:41:
26:90:46:56:72:5f:21:25:9e:0b:10:4c:da:5b:41:b4:27:f1:
7f:6c:c7:dc:dd:6d:34:7a:0d:64:56:d7:04:62:1c:4a:08:8c:
f0:55:4d:e7:20:7d:19:cf:e1:ad:f2:2d:d5:6d:91:1c:be:09:
b8:47:bd:15:28:2d:74:c3:d3:e8:f0:fc:bf:c7:36:a8:18:e1:
ea:e8:86:ee:fa:7c:92:94:76:6d:24:85:47:cf:60:7b:3f:ea:
a7:73:dd:37:1b:11:b2:82:97:ff:f8:58:32:e6:78:00:b9:45:
77:80:eb:a2:20:e9:51:3f:73:97:f0:c7:42:87:b3:d4:16:67:
29:ff:f6:c5:b4:a0:17:cd:0f:ec:df:9b:c5:c3:44:a3:78:00:
10:82:a4:c3:e2:2b:ed:54:88:06:7e:76:15:21:3f:5b:6c:d6:
8c:ab:33:6e:b1:66:e6:75:b4:d9:81:21:48:dd:35:dc:41:c0:
42:2c:86:38:ab:23:49:c1:1e:9c:ee:59:6f:77:29:79:d4:2f:
60:d6:ff:53:11:70:43:02:30:0e:0a:cd:c6:7e:ce:e2:4c:c1:
11:8b:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:18 2025 by rpki-client