Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: I7iCYS3eUuoMGuxJL+wmoWgEumh02T91JFkQqsp7K5c=
Subject key identifier: F5:D4:4C:8F:53:54:05:8F:43:1E:10:15:F9:C2:37:9D:3C:33:E2:AD
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 0198D4A84E80B50FE478F484D09BE21445D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 0A84
Signing time: Sat 23 Aug 2025 02:00:56 +0000
Manifest this update: Sat 23 Aug 2025 02:00:56 +0000
Manifest next update: Sun 24 Aug 2025 02:00:56 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: XMwXKg52fJLjrbkmq3lS93f7ZQQiQqaC5rxdR1vos28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4e:80:b5:0f:e4:78:f4:84:d0:9b:e2:14:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Aug 23 02:00:56 2025 GMT
Not After : Aug 24 02:00:56 2025 GMT
Subject: CN=f5d44c8f5354058f431e1015f9c2379d3c33e2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:3f:79:48:94:fe:be:2c:a4:f9:b3:12:59:
03:2b:c5:97:cd:de:e6:48:f1:e9:53:de:b3:7a:a9:
63:15:ed:e9:64:49:f2:07:88:ac:ea:95:bd:ce:6d:
4f:72:b4:5f:ef:32:69:c0:03:98:97:f8:28:50:65:
31:a6:a6:83:32:9e:13:c4:2e:aa:a3:28:61:59:84:
07:7b:0e:7e:b7:dd:50:b8:50:93:21:54:01:05:49:
0f:04:c1:49:76:e9:a4:7a:71:e0:d0:51:f8:6b:ce:
ca:63:91:d3:87:85:80:9b:d8:9a:98:c3:30:f0:07:
a3:79:23:0f:08:19:68:4d:c7:6d:ae:28:3c:78:31:
ff:4c:b4:af:4e:64:22:11:20:ef:fd:04:c3:17:ed:
a3:7e:2d:ed:fe:2d:8d:12:b6:6f:9c:a5:f7:ca:d0:
67:a5:09:6c:3b:69:e0:73:85:73:7f:a3:98:ca:66:
78:17:9f:c8:16:b7:be:f1:51:e7:a0:5d:1a:38:da:
ca:8a:30:ea:ca:3d:5a:91:9f:d8:ec:5d:84:91:8d:
3c:f4:1c:0f:74:ae:73:a9:98:16:cb:8b:11:c6:25:
26:b1:f5:c4:8f:65:0a:24:20:83:0f:40:b2:66:14:
3e:38:9b:7f:73:91:90:bf:30:d2:93:6b:b8:b4:7e:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:4C:8F:53:54:05:8F:43:1E:10:15:F9:C2:37:9D:3C:33:E2:AD
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:2a:b3:cb:be:2f:7c:bb:10:93:7d:c4:f8:1b:ad:43:46:
55:f5:4f:64:ff:b6:70:fb:c9:76:6e:ed:a0:af:43:ab:6e:2d:
5d:7c:c4:c0:54:44:bd:8f:22:d2:6f:84:75:7b:69:a8:89:5b:
c5:2d:87:9c:09:75:e9:a1:21:cd:99:5c:15:a3:62:7d:68:f8:
7f:64:80:3c:f5:b1:95:cc:8a:9d:f2:23:59:c9:a1:b8:06:e8:
2b:94:7a:a4:95:39:34:b3:b0:53:34:e9:56:ff:1d:56:68:a1:
75:6d:61:9f:a1:e8:8d:64:b9:03:08:c6:b2:84:61:e8:5f:c5:
1e:79:28:b6:0b:4b:a6:58:a1:cf:b5:a9:e7:54:d8:85:76:44:
20:f0:ce:3b:4a:06:03:1e:5e:03:82:1f:b0:19:bf:64:29:a3:
68:ac:74:0d:a8:85:d5:3f:4e:fe:b6:20:a1:d5:49:20:4e:31:
24:d6:a7:56:d7:71:f3:cb:8d:58:4a:a4:08:dd:81:e4:ea:c3:
76:05:83:eb:49:d5:42:90:65:c3:3e:f5:58:5b:04:d2:e5:1c:
fe:39:3b:17:87:fb:29:2d:20:da:f6:12:c0:db:fb:12:25:c6:
58:3a:77:c7:f0:8e:07:a7:c5:0c:92:2b:7a:a4:76:5d:df:6e:
af:cb:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:38 2025 by rpki-client