Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier: siHaUOZ2V+VB4515lWbfpM+or2SKnXUwQoCZrvXVzkw=
Subject key identifier: 25:05:6A:66:9A:DC:88:4E:97:7D:A2:F4:6E:F5:FB:AC:C0:50:94:1D
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial: 0198D54E6416EECDA81FF02D998DBF307313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number: 0808
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: UShY5Y6cozS7eDbHL7k8TAAgLab4WSLd7Q8iZoeeoGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:64:16:ee:cd:a8:1f:f0:2d:99:8d:bf:30:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=25056a669adc884e977da2f46ef5fbacc050941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:d3:47:c0:64:b6:77:c7:20:d5:95:9b:73:
e4:6e:f5:d8:af:36:22:d5:d7:e2:c4:26:50:c1:cc:
e4:e6:4d:38:86:14:0c:19:97:e8:46:4b:b2:42:24:
a9:93:b2:be:53:48:56:5b:60:89:6e:f8:56:ee:21:
f2:bb:b9:09:5d:c2:4d:d0:77:1a:4f:9c:a5:34:3a:
7e:d2:8f:b3:98:b4:b1:3e:6b:49:dc:6e:e7:76:20:
72:0f:b3:af:bc:60:36:82:2b:6a:95:8b:6a:c0:33:
6d:33:5d:3c:99:2b:0a:2b:c3:93:82:54:01:39:1a:
a8:9d:6f:55:72:77:e0:e5:3d:46:12:94:89:78:bc:
22:9e:8d:d1:7c:bc:b0:13:77:c7:b1:9a:c9:9f:a0:
97:25:29:6a:05:0f:1a:cb:ab:c3:19:71:f4:77:93:
52:c6:65:fa:40:52:68:f0:8a:73:97:fc:21:cc:c5:
95:23:a3:62:92:e4:c0:90:20:a9:ec:1b:dd:33:75:
d1:e7:db:2e:03:52:16:43:21:e9:99:02:5d:f3:5a:
b1:02:fd:01:2b:10:84:07:c1:88:23:5b:46:c5:4c:
21:24:d3:ca:75:97:d0:ca:68:09:9f:b8:c2:c6:f1:
41:dd:0f:55:d0:1c:50:81:07:f4:ec:0b:95:aa:d6:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:05:6A:66:9A:DC:88:4E:97:7D:A2:F4:6E:F5:FB:AC:C0:50:94:1D
X509v3 Authority Key Identifier:
keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3b:c5:40:5e:59:ba:7a:39:62:58:bb:e3:a1:2a:0c:fc:4f:
02:f7:93:a0:28:5e:38:c6:05:85:45:24:06:c9:80:81:8b:80:
80:bc:2c:71:e5:05:ac:47:d6:70:eb:0d:52:0c:21:3b:f2:03:
80:db:e8:dc:7b:93:b0:7f:36:51:b2:dc:6a:c3:a6:47:ab:77:
3e:5c:22:3d:2d:ae:c3:0a:7f:27:1c:95:8d:fc:ed:42:a2:e9:
63:51:9f:b2:63:f5:80:1c:b8:7b:04:90:86:e0:fb:38:53:1b:
ce:26:24:ac:3e:57:3b:b4:69:a6:49:7f:5b:16:57:5a:30:dc:
65:ec:f3:39:4f:24:0f:72:4f:d9:7b:0d:18:20:e3:80:31:5d:
17:9f:ed:d5:91:f3:10:fa:eb:70:2a:5a:b7:82:a8:4f:32:0a:
87:ba:cd:8a:78:98:47:21:f6:71:96:56:fe:b1:bc:57:0c:f4:
68:86:3c:d9:c7:fb:32:fa:37:ab:c4:a2:63:8f:1b:ff:91:53:
0e:ad:2b:30:76:2c:23:36:1f:11:c9:60:c2:e0:c5:e9:48:a4:
bf:06:fc:bd:0d:b8:49:c8:be:6e:8f:36:02:53:7e:85:bd:88:
9c:6f:a5:94:a3:1b:43:1e:eb:fd:8c:c7:e1:60:92:a0:3f:d9:
b6:cf:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:28 2025 by rpki-client