Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: OjK06dNwbvMlbgvHIlnvfkuz5ORzOQMBvXjOFugnDvA=
Subject key identifier: 4F:5A:86:92:C0:CF:BE:A2:58:DC:BB:4A:F5:40:59:94:F9:56:BC:50
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0198D7E1518EE088B89E9D5691D3E2658B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 137C
Signing time: Sat 23 Aug 2025 17:02:04 +0000
Manifest this update: Sat 23 Aug 2025 17:02:04 +0000
Manifest next update: Sun 24 Aug 2025 17:02:04 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: TyZqEwXAmiuc4QukALGpmzsSXl98vtWLz+tEWJIhu4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:51:8e:e0:88:b8:9e:9d:56:91:d3:e2:65:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Aug 23 17:02:04 2025 GMT
Not After : Aug 24 17:02:04 2025 GMT
Subject: CN=4f5a8692c0cfbea258dcbb4af5405994f956bc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:57:e8:39:07:8e:14:9f:8b:ba:6a:d9:37:
88:fe:1f:d1:23:ca:b7:e3:b6:6c:75:70:1b:4b:cd:
b8:7d:b5:3b:0e:89:85:5b:b8:c0:95:b3:e2:7a:2c:
6f:2b:ff:d8:c8:a8:5e:67:8a:c0:2f:65:8d:e9:38:
d3:29:f8:68:1f:b7:19:14:69:14:20:b0:11:69:8a:
70:09:04:82:55:c7:34:fb:21:bc:b6:a4:dc:d1:c5:
55:1f:84:73:23:00:d1:8f:5c:81:76:5b:1d:8b:3f:
28:5b:17:20:14:ad:6d:d1:44:07:ea:1c:3c:37:79:
43:53:b3:24:65:9b:44:ae:a8:06:f5:14:77:4e:ae:
e7:68:df:37:fa:a3:ea:2c:f7:ba:0c:52:e0:ca:27:
39:7d:8a:9b:f1:65:6d:88:e0:59:ca:66:2c:3f:de:
11:b9:b8:d7:ee:a3:e5:e6:0f:c2:68:c3:54:88:e6:
e7:5e:17:8a:5b:02:4c:0c:ee:4f:58:5a:0e:8f:e0:
eb:21:08:68:a2:48:44:14:4f:6c:43:2f:6a:95:01:
c0:df:d8:e5:2e:53:28:37:9c:35:9a:2f:e6:69:83:
cc:e8:ae:c0:2b:cd:91:4e:c9:e5:9d:30:64:3a:f0:
f5:70:fb:eb:0f:88:be:96:41:eb:9e:59:04:f3:c4:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:86:92:C0:CF:BE:A2:58:DC:BB:4A:F5:40:59:94:F9:56:BC:50
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d1:ba:d0:55:55:83:39:90:4e:7e:d9:da:00:73:22:4d:7a:
15:08:f5:e5:ee:1e:04:8b:c8:90:71:47:de:91:80:24:f5:09:
7a:90:95:85:a9:9c:bc:22:13:02:54:54:4c:c1:ed:f5:fd:5b:
4d:e1:15:40:ba:4a:6b:31:60:54:d8:53:b7:8c:7c:64:0b:47:
55:18:ed:20:6b:2b:93:54:f2:e5:16:ec:e1:78:90:00:19:41:
c9:50:db:1a:44:dd:d8:a8:67:b6:d8:0c:5e:8d:3d:91:a5:01:
71:ab:00:b8:b6:be:d3:ac:92:d3:f8:20:43:c5:bc:36:1b:7d:
a8:62:b6:5a:7a:63:0c:8c:1f:88:6a:02:e5:ad:2f:32:2d:5d:
84:e8:44:ac:4e:33:9e:d4:21:27:d9:69:64:2f:7e:ec:d8:70:
d8:4b:13:08:c9:e2:c5:63:0f:18:d4:25:c0:7c:38:22:f1:a7:
76:81:46:9b:4a:39:6f:e7:84:77:d7:a7:2b:6e:96:de:ed:34:
19:ba:c3:3a:bc:ec:ac:3c:f8:98:d1:f9:80:e7:45:73:16:11:
e0:a4:a6:a7:e6:c6:34:68:88:58:08:ed:71:bb:26:2a:7c:39:
35:13:87:0e:85:16:f9:71:93:f4:70:48:2d:12:b8:ea:6e:94:
2c:ea:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:43:55 2025 by rpki-client