Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: ZP7M/rt1KODRq/1G34Vl5YS6ieEBXsLsyAf3mNxjgLA=
Subject key identifier: 44:5A:DD:CA:3F:1D:F6:D4:45:27:90:05:3B:91:20:03:72:79:F5:59
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 0198D5F11A63186A6F5B426844133DDC700B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0AC8
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: FnjA8Q8E9kmw+tuAmiVOZbAG42vhNQVQm6BY+/WV/8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1a:63:18:6a:6f:5b:42:68:44:13:3d:dc:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=445addca3f1df6d4452790053b9120037279f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:2c:12:78:9d:8f:dd:92:a1:ea:b1:03:35:
74:32:57:0d:42:a7:48:56:12:ac:d0:5f:05:81:17:
9c:6f:b7:f3:f6:ac:67:ee:13:16:15:e1:58:6a:4c:
de:14:a0:7c:69:7d:00:ae:21:df:1d:2e:dd:d4:34:
13:58:46:55:4c:6a:2d:ef:a8:bc:79:91:ed:eb:87:
6f:6d:69:d9:12:e6:be:b5:4c:2d:75:16:02:fe:74:
8a:bb:d1:6e:5e:01:fd:51:c3:f3:dc:c1:79:f8:9a:
c7:0f:f6:79:9d:3e:f6:52:8f:de:df:f3:ff:14:d3:
be:3a:98:7b:1b:11:87:1f:f7:82:5d:da:17:a8:cf:
ed:79:ad:15:fd:94:87:f6:c4:1b:df:e4:47:3d:29:
1e:9e:f1:88:71:68:bd:13:f2:3e:56:0c:2d:f2:67:
40:74:87:dd:98:85:8f:c7:4c:63:61:d8:35:87:31:
b5:24:18:50:8c:d1:22:6f:1b:8f:73:7a:85:a1:e7:
a3:53:7e:64:d3:b2:3e:9c:30:42:2d:4b:9f:82:0a:
c1:72:1d:1a:59:25:10:f3:9b:ab:3d:b3:61:dc:37:
bc:82:24:b9:da:85:8d:36:12:fd:72:1f:8e:70:4f:
5a:10:27:37:8e:f4:e0:4d:4e:07:1c:f2:cd:15:c1:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5A:DD:CA:3F:1D:F6:D4:45:27:90:05:3B:91:20:03:72:79:F5:59
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:87:a8:36:ac:b0:d5:68:b8:9a:fd:25:b4:28:44:c9:8d:63:
90:6e:b4:ef:00:13:05:c7:ec:f3:de:58:7b:3a:1b:87:8f:04:
53:aa:33:4d:44:5d:b9:eb:33:12:f7:22:14:1a:d8:73:38:f0:
16:8e:3b:31:b3:be:fd:db:91:aa:4b:87:21:ee:fd:06:f7:e3:
ba:78:f6:35:00:c4:78:0b:7c:a0:8d:b2:e3:25:b7:95:f4:90:
72:40:32:c8:93:90:bf:61:88:1e:90:4d:24:7e:76:af:2f:fb:
7a:96:31:c3:8f:98:61:e4:a1:e0:d2:32:9a:9e:2b:10:c5:38:
a0:75:bb:ef:2d:d1:5f:09:c7:1b:fa:a7:2a:c8:1c:00:e7:c2:
4f:96:08:6a:53:50:73:36:45:3c:e4:fa:a3:fb:45:73:fb:3b:
55:f1:41:57:2c:21:e9:4c:63:74:d3:07:89:b0:de:66:0f:7c:
d9:03:e4:98:8c:0c:a2:27:a8:4e:b9:b3:b5:0a:47:3c:ec:05:
03:d8:5a:2d:f7:27:88:08:03:e3:5c:9c:78:2b:09:a6:e0:05:
d8:ab:df:d9:39:a1:68:9e:db:9d:df:19:ca:df:4c:49:72:b5:
a8:70:a4:65:7e:9a:9e:21:05:0c:2d:bc:ad:65:3a:c3:6d:38:
14:3d:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:58 2025 by rpki-client