Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File: jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier: csAdsJ1NDfg1m3fqTod94kO8dDVJnJMnCjixm2KRb5Y=
Subject key identifier: B1:C4:35:DA:77:4C:C3:5C:E8:E9:C6:DD:BB:B7:51:54:DB:0A:5F:11
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial: 0199FB7CA6DC9F1EC420743F08A7F105B7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number: 07A7
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: 1_Cx0FQtNmEayO6mr3uAPUq_s9E.roa (hash: YcdvazhIm7zqYM8zJdIALjmfMmrTX/mjzf4LOtTALFE=)
2: PeHEDW_rP1JUEqYPKxq3ZE0-zH4.roa (hash: m2+wZp8wzsLpKqeRZNklpBnfCK4breDaWRdrgO3+3ys=)
3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: kEeIDE1if+FvvEHUtxzzoOBFrRmszZ+jpGxja5v4K7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a6:dc:9f:1e:c4:20:74:3f:08:a7:f1:05:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=b1c435da774cc35ce8e9c6ddbbb75154db0a5f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:5b:20:10:08:aa:1a:a3:0c:70:d1:a0:0f:
1e:db:9e:01:85:80:b7:52:7e:b2:92:67:f4:2b:99:
75:fe:cb:bc:8a:16:d0:93:03:1c:18:c1:29:5c:52:
39:9d:5e:b6:a0:e1:1e:71:48:9d:f1:8b:a8:71:a2:
2d:c9:90:28:aa:25:53:e4:d9:9a:f9:bd:b8:69:7f:
c0:0c:ee:e1:12:31:d9:8e:67:b2:eb:ef:e1:19:d7:
08:73:b2:0a:1a:dd:21:ed:98:39:ad:4e:78:e5:e3:
07:0d:a1:22:18:b8:71:a2:5e:23:07:0c:50:24:ed:
bc:7e:66:c9:af:45:a6:2b:32:a7:1d:39:35:f6:68:
b1:ff:e0:a9:03:64:e7:a1:7f:f0:58:d6:c7:17:88:
99:2b:b5:0e:fd:26:f4:fe:33:5f:a5:94:63:4f:3a:
8c:a8:99:d7:1d:b5:67:b1:66:7b:1b:0b:b6:0b:df:
17:6f:80:ed:86:a0:fb:46:ec:d8:9f:c3:9e:55:c5:
f9:da:bd:63:45:ae:20:b4:a2:10:7f:81:1e:6f:a5:
33:0f:98:a3:73:2b:c2:2c:30:3e:b2:34:53:86:78:
70:a3:73:10:8c:4d:7d:71:9b:e9:b7:43:f6:f6:95:
d5:9d:3e:8d:1c:82:41:fc:b2:ad:a3:d7:30:c0:83:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:35:DA:77:4C:C3:5C:E8:E9:C6:DD:BB:B7:51:54:DB:0A:5F:11
X509v3 Authority Key Identifier:
keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:cf:5e:1e:4c:c6:2c:eb:3d:f9:3f:c2:ce:8c:b5:09:c7:
dc:76:3c:8e:79:b4:0b:11:0a:18:2e:b8:74:20:8d:a7:40:35:
e0:db:f2:f7:ee:01:78:f9:25:f4:d5:59:03:b0:cb:50:fc:ea:
c5:fc:ba:f0:37:b3:f0:11:12:e2:50:61:7c:53:0d:49:60:87:
10:0e:af:44:05:f2:55:b4:01:7c:6a:a8:6e:b3:90:1b:e0:01:
50:18:e2:5d:aa:d3:24:99:e2:eb:1d:03:8e:ed:83:d7:d9:23:
03:f8:d8:f9:47:80:7a:0f:2e:4d:ec:33:f1:ba:c7:3c:7a:50:
9d:08:57:9a:4c:4d:0e:1e:fc:db:99:53:88:60:79:f6:d9:8d:
1e:2d:56:67:f1:26:4d:b1:b6:41:6d:62:78:46:7d:75:bd:b9:
db:4d:a4:35:3f:c3:ff:32:4e:2c:7f:86:bf:e8:48:95:d8:03:
16:71:58:62:ef:b9:f9:6a:80:53:d8:c7:29:55:e8:87:84:c5:
43:58:9a:a4:41:5e:60:98:ec:7d:56:0e:92:a5:14:d3:f0:fb:
92:a9:69:1b:1d:f8:2b:65:82:c0:39:8f:64:e9:ae:fd:5a:39:
97:33:04:42:49:0e:ca:b5:c1:3a:16:1c:1f:0a:48:a6:53:2c:
a5:66:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:29 2025 by rpki-client