Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: MTRjNtc9L3BU26Yt7mKVVX6OnqY19N6YZuo9nSVoC9c=
Subject key identifier: 19:0B:B7:91:D6:75:55:EE:98:94:8D:DB:05:0F:D9:3E:C2:42:FB:E4
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0198D58358FCB47CEF390E5276F3456B2F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 0F59
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: yQihSmk7cACi9B4RtdFl6AwNVIwom1qUz7ff5dVUaRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:58:fc:b4:7c:ef:39:0e:52:76:f3:45:6b:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=190bb791d67555ee98948ddb050fd93ec242fbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:e6:92:0a:6c:36:43:91:b6:bf:94:18:4b:
e5:a1:67:df:4a:7e:1a:ea:e2:ca:38:39:95:9c:73:
bc:f5:9d:76:20:0a:ec:64:6e:59:d9:a3:ac:70:34:
bf:be:6c:24:e7:ad:05:7d:b8:3f:83:93:d4:87:79:
58:3d:3b:3d:1c:1b:ae:55:02:21:34:7d:b9:78:76:
eb:a0:65:d8:fe:42:c9:38:c6:88:b0:35:0d:f1:20:
ce:89:76:4b:75:47:84:8d:2f:3b:f5:23:cc:fc:74:
6f:e7:ce:9c:2f:37:2f:55:dd:76:dc:a1:03:9f:72:
32:37:c5:8a:b4:7f:1a:68:ba:ea:4d:4f:8a:8e:15:
7e:5c:3c:05:35:5e:9f:34:44:1a:5d:3f:4f:b9:6d:
0a:23:40:34:fc:6d:70:30:a1:c8:bb:dd:d0:82:b1:
cc:12:34:18:14:e7:75:aa:23:ec:35:f1:6d:6e:ca:
31:61:7d:b0:00:fd:40:d3:e4:3d:5c:c0:1a:e0:61:
98:2d:85:ce:9a:26:6b:c6:c1:72:60:26:66:61:13:
c0:ec:19:0a:a2:9d:90:ec:cd:b5:3d:48:35:a5:e7:
02:10:ee:92:e7:f6:06:2c:a5:e1:0d:d5:ca:cf:bb:
51:53:21:3d:73:f1:19:9f:2f:33:12:5f:34:64:da:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0B:B7:91:D6:75:55:EE:98:94:8D:DB:05:0F:D9:3E:C2:42:FB:E4
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:d2:bf:40:fd:63:95:09:65:00:fd:f3:e2:4d:cc:91:d2:
6c:3a:36:f7:e2:25:78:b8:eb:09:3d:36:59:f0:98:e1:ba:bc:
2a:04:7b:47:66:1f:0e:99:60:15:68:da:37:8d:f1:96:20:ec:
8f:65:a9:9c:c5:2f:74:02:2d:89:6e:54:36:86:68:14:c1:56:
72:1c:3c:24:99:4f:46:ba:05:9e:42:3b:1c:b5:01:8b:51:fb:
7e:7f:16:e2:63:d6:36:3f:6a:7d:2b:76:6d:e9:c3:64:9b:54:
82:57:4f:07:60:f8:19:d8:eb:f1:31:c4:63:d9:d3:7f:fd:4b:
70:d3:cf:58:27:50:de:10:b5:1f:4f:1e:c6:89:85:0c:9a:72:
6b:8b:82:df:ca:a8:e0:50:ae:ac:5a:ac:79:99:ac:e3:67:a0:
66:0a:45:85:ef:e9:91:98:07:4c:47:75:ef:d1:e7:cc:1f:14:
55:2c:89:9a:92:6a:01:82:d4:f2:f1:d9:54:09:de:fb:30:72:
20:81:51:95:0b:d1:72:04:b2:23:f2:df:2f:6e:0d:c0:68:e3:
54:83:95:e3:62:83:15:04:f6:ad:ca:90:36:cb:16:a7:a3:79:
da:78:44:3b:8b:3a:66:4a:fd:25:3f:6c:55:05:84:c5:60:40:
2a:16:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:47 2025 by rpki-client