Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: OEhy59t/o0mu6mesYrBfQOJf/ch+XrlYgfwFZnyzgms=
Subject key identifier: 7D:E1:B1:97:47:84:2B:89:B6:CD:CC:C4:79:79:68:BC:80:B4:CC:B1
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0198D73B7D313CF29BF1E5EBAA2D01319F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0872
Signing time: Sat 23 Aug 2025 14:00:56 +0000
Manifest this update: Sat 23 Aug 2025 14:00:56 +0000
Manifest next update: Sun 24 Aug 2025 14:00:56 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: 2anZb96m6+ZHrdYfKiUU5VaadEPJuILQlyRs58hBwvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7d:31:3c:f2:9b:f1:e5:eb:aa:2d:01:31:9f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Aug 23 14:00:56 2025 GMT
Not After : Aug 24 14:00:56 2025 GMT
Subject: CN=7de1b19747842b89b6cdccc4797968bc80b4ccb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:5a:ba:b2:8e:67:19:90:c9:0a:71:b3:dd:
84:f8:e6:c4:f8:86:5f:b3:89:2b:c0:0e:c7:81:73:
e5:9c:a3:14:88:f8:1e:21:e3:c1:16:68:c3:04:c0:
83:2a:6d:b1:0d:62:1f:f6:13:17:13:2d:b2:48:14:
52:e4:39:50:82:53:2f:9d:ee:82:e7:1d:f6:d1:c9:
30:8c:d7:03:36:69:d6:1c:d7:22:9b:bf:64:df:2f:
e8:15:fd:5e:b8:93:60:77:31:b5:68:5f:b9:63:15:
cb:b1:55:d8:40:72:4c:42:89:ee:25:e4:a9:f0:8c:
84:a7:05:ff:f3:c1:e8:f3:7b:70:15:d5:d4:43:3d:
0d:53:37:b6:56:b7:8d:6a:f7:8a:f7:2d:3e:a9:a2:
3e:4c:c9:74:f2:59:0b:0e:36:ef:d8:45:1c:5f:f4:
a3:5f:2d:75:ab:0a:dc:89:02:d2:69:ca:da:b0:e4:
69:db:f6:78:42:a0:f0:3d:d0:a3:7a:96:57:68:6e:
e3:c0:d8:3a:22:1b:3a:fd:32:7b:da:40:45:66:7c:
10:35:b1:2e:66:36:58:56:f4:8e:e6:d0:cd:f1:b3:
9d:e1:88:95:b7:26:a3:15:52:6d:06:31:a5:e1:47:
41:b0:ee:4b:a9:14:e2:50:7c:e0:c0:01:eb:30:c7:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:B1:97:47:84:2B:89:B6:CD:CC:C4:79:79:68:BC:80:B4:CC:B1
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:25:57:db:c7:fb:f8:9c:6a:46:63:2e:f0:83:30:57:15:
17:83:56:ac:1f:83:d9:37:3a:a4:c2:4c:d7:4d:fb:2c:b7:f6:
6c:90:07:12:4e:c0:43:8d:67:d6:f4:da:bd:6e:4f:33:bb:87:
2a:36:38:4b:50:06:9c:06:20:0a:c9:1b:d8:b8:bd:06:96:36:
3b:11:a7:0a:20:fb:35:f4:86:a1:b3:45:b9:a1:1b:5b:8f:02:
0b:bb:d2:37:0a:24:f0:0f:2d:af:ce:f4:9a:72:b5:ff:d1:5e:
66:c2:e0:89:29:3c:a4:e2:f5:e6:bf:73:ba:84:52:68:4f:ec:
cf:ec:34:2f:be:e8:b7:a0:9f:29:ca:59:b5:91:22:e8:ac:35:
0a:e7:79:b2:24:40:50:da:48:6c:34:a3:69:85:c5:aa:8d:f4:
93:51:5c:32:87:64:05:8c:6c:68:aa:d2:bd:53:70:d2:60:6a:
99:38:2b:6e:77:32:9f:54:63:37:37:dd:89:0c:0a:6e:0d:e7:
e5:15:62:fa:b7:53:eb:13:8f:7f:00:3f:a4:14:41:4f:f6:34:
d6:69:d0:52:53:f5:99:9f:79:3f:5c:a8:d1:93:e5:4d:8e:88:
c2:39:df:c1:db:e6:42:a2:37:85:e0:a1:23:d6:d5:8a:6e:62:
67:52:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:08 2025 by rpki-client