Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: /4qhfp0QajOMvibrCQZ2H94ctQo8NWtyVINV9kGJ/i4=
Subject key identifier: 3E:78:4A:45:8F:F4:1D:65:40:B4:CB:9E:C9:1A:66:21:A0:B3:B5:49
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 0198D4A7DF97D832AFD1AF0811221917B7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 09F3
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: M91HlCTk4o8KuBMh4Qm7zm9GWzAxw1ZaOeOYGosVh2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:df:97:d8:32:af:d1:af:08:11:22:19:17:b7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=3e784a458ff41d6540b4cb9ec91a6621a0b3b549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:c6:0d:61:21:6c:57:0e:53:7c:ee:50:ec:
1e:56:e0:b4:9d:da:3b:17:bd:e6:29:e9:38:7e:52:
50:f8:58:76:80:4d:3c:fe:0b:f0:a1:38:e0:c2:a8:
ab:9f:9a:de:78:45:d3:55:6f:ec:95:af:52:b3:cf:
c9:94:72:d7:6d:5a:e3:03:c8:e0:54:91:ac:95:fa:
cd:a7:57:a5:16:d5:42:58:6d:06:43:b3:a9:da:e7:
ed:4c:f5:26:55:6d:07:f3:e5:ad:d4:36:4a:62:3c:
03:cd:c4:cb:dc:ef:91:75:aa:e8:1d:ff:25:a8:76:
10:9d:53:b0:6b:c4:1c:62:0d:c1:d4:5d:82:0e:e6:
f5:43:1e:2d:d4:ef:11:62:71:f4:db:2b:cd:1c:d8:
ef:b0:d0:6d:67:79:9a:cc:16:76:33:40:bd:79:ac:
f2:57:af:fe:01:b2:62:0c:31:4f:4e:c6:7f:95:09:
8d:7c:1c:e5:c5:e4:a4:b4:a2:c9:9f:0a:ba:f4:f8:
36:b1:10:85:d9:0a:8b:d4:1d:f4:d1:3c:45:df:4e:
36:5a:1c:a2:12:f1:55:ce:e4:54:26:34:74:7d:ce:
7a:b5:59:73:b8:b5:78:c6:74:86:57:dc:53:84:9d:
af:19:fa:29:f5:82:a8:13:8f:1d:ea:b1:59:5c:d2:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:4A:45:8F:F4:1D:65:40:B4:CB:9E:C9:1A:66:21:A0:B3:B5:49
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:79:11:35:fc:90:9f:1a:58:18:64:1c:7c:35:8b:9e:e9:ab:
34:6e:82:41:11:e6:bd:62:71:94:82:63:b7:6c:96:c1:cb:7f:
04:2a:77:e3:54:cf:3f:af:19:84:04:a1:49:6c:2a:01:75:68:
7f:93:2c:40:9a:9d:01:69:1f:ff:a1:2e:14:3b:0f:37:ec:1a:
a5:87:17:d4:b9:de:9f:3b:f9:84:56:5a:66:78:57:fe:eb:b1:
ae:7f:19:2e:01:69:8c:38:2b:7e:54:b3:be:46:d8:eb:27:d1:
11:d6:73:d8:7a:aa:08:f1:71:4d:d6:27:e0:ae:86:cd:6f:4d:
fc:86:67:0a:da:19:f6:f5:92:24:9f:3c:a1:cf:fb:7c:41:c1:
28:27:30:e8:dd:9a:1f:af:5e:90:9d:c6:a8:7a:9b:aa:96:d4:
04:f5:33:4c:c5:25:ab:1b:bb:b5:c1:c0:96:a9:b0:29:fc:c1:
43:a9:30:0d:94:5a:8f:e5:64:3d:39:52:e3:d5:1e:d8:9a:bc:
f1:ae:2e:18:a0:12:54:11:d0:ff:54:66:1b:e9:6d:55:77:0d:
0b:d5:a1:70:67:8a:93:fe:1f:a6:cd:be:ba:78:2c:ff:0a:4f:
d0:65:f6:72:68:6f:14:44:be:a1:70:6e:14:4a:de:5b:27:37:
df:04:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:56 2025 by rpki-client