Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: Um4UNxrpturssi8KMVKF+e2UTdl6LBT/WjJ8X0qukKk=
Subject key identifier: 4B:72:8C:DC:4E:45:36:CB:4D:A3:EE:2D:88:4D:72:7C:CA:94:C1:F8
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0198D5BBE063F71432FF257910DFA5DC3768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0231
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: RNypVVtew0ECrOkPg4p2VVuS3YqaQfU1LeHz4pYdV1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e0:63:f7:14:32:ff:25:79:10:df:a5:dc:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=4b728cdc4e4536cb4da3ee2d884d727cca94c1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:9b:60:50:bd:61:28:e6:66:5e:eb:d7:7d:
60:ad:4f:1a:ac:df:ef:c3:19:f1:c7:93:7a:8e:70:
a9:19:94:d6:a1:ac:3f:11:27:65:04:5d:04:44:02:
5c:78:b9:a4:41:2d:79:da:37:51:ee:9c:89:92:9f:
58:cb:3b:2f:3b:bf:ab:d8:0f:e0:9a:cc:dc:dd:13:
38:c0:10:4d:0e:81:ad:94:62:18:e4:e2:01:07:72:
fc:7d:60:e3:c6:1f:0a:62:cf:8b:dc:56:fe:ae:c6:
f7:0b:13:c2:96:c8:e2:9f:4c:b8:09:d7:f0:47:d9:
cb:4c:08:fd:20:71:22:32:cb:9f:50:3c:33:a5:f5:
98:39:b2:c2:d3:bc:2b:08:80:de:6b:27:d2:b6:df:
37:dc:fa:d7:fc:3f:33:c9:5e:98:49:05:2f:ac:c5:
7a:27:1f:d7:6e:8a:27:0f:64:66:2d:57:ab:5f:98:
3e:19:76:ae:df:e1:cc:9b:df:94:a6:3c:e1:06:e1:
e4:0c:22:72:1b:f4:fd:49:a3:5e:b8:2f:2f:9b:e7:
45:c2:4b:76:ee:e4:f3:97:d2:e7:54:3f:23:38:52:
c2:0e:a4:e6:82:d9:86:6b:70:8b:b4:e5:a1:27:fa:
be:00:9f:98:b7:3f:a3:86:87:42:d4:9a:c5:f4:1e:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:8C:DC:4E:45:36:CB:4D:A3:EE:2D:88:4D:72:7C:CA:94:C1:F8
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:8b:b9:8b:5c:54:d5:ad:ab:6a:04:0a:f6:14:07:4b:12:
a9:3b:8c:77:f0:49:a1:33:a9:df:a2:da:43:eb:a7:78:92:8c:
8f:52:5d:dd:8e:dd:49:f1:ba:c4:c6:4b:88:c0:1f:0b:dc:a0:
a1:8d:3f:e2:0f:bc:62:f5:f3:ef:74:96:c1:de:ab:7b:67:60:
47:ad:b1:8b:2c:d8:44:a9:0f:b0:f5:9f:0c:f2:df:06:db:69:
bd:0b:8a:ea:4c:f1:6c:d4:a2:8f:f1:2d:b0:2a:f9:64:45:9d:
dd:e1:6f:4f:4e:01:0d:46:4f:93:87:05:44:6d:44:07:ca:54:
ea:2e:96:24:b5:b3:27:48:47:47:a9:ba:79:45:ce:2f:a8:7c:
1d:a8:7b:6b:97:cc:d6:c8:80:38:40:64:b6:c3:46:bf:74:08:
b4:09:5c:20:15:92:00:b6:ed:2b:7a:91:ba:76:8c:eb:a1:fa:
63:68:7e:e1:71:25:3f:d9:bb:13:ee:91:7d:02:76:05:5c:ac:
64:44:f8:e9:c1:0a:57:05:1e:4a:ae:18:df:23:ba:92:3b:56:
a0:24:47:75:8f:40:c2:f0:f3:1a:0d:b4:d6:a5:08:1d:0b:c4:
24:69:3f:3e:3c:2a:08:f1:8c:fb:82:f0:94:79:fe:93:28:2c:
3f:5a:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:35 2025 by rpki-client