Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: 7y2RvG8Cz+BwCm9eDGKfuQ4v87Aa1Z83hZxQ8NpUkkw=
Subject key identifier: 33:61:73:AD:BD:00:5A:69:B1:83:26:3A:49:4F:41:3E:57:BC:9A:4D
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 0199FEB48A0698EEDF5342670EC6724EF379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 090B
Signing time: Sun 19 Oct 2025 23:01:08 +0000
Manifest this update: Sun 19 Oct 2025 23:01:08 +0000
Manifest next update: Mon 20 Oct 2025 23:01:08 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: oABfzdLwqAAqnOOTXWA5z+LoPbeZUgpWrYlgQifMQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8a:06:98:ee:df:53:42:67:0e:c6:72:4e:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Oct 19 23:01:08 2025 GMT
Not After : Oct 20 23:01:08 2025 GMT
Subject: CN=336173adbd005a69b183263a494f413e57bc9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:5d:ae:43:b6:d4:49:ba:90:7e:cc:45:23:
4d:ac:6a:62:2f:1d:7d:cf:b4:c0:7b:f8:67:34:ff:
66:ac:85:9c:e1:8f:1b:07:f9:5f:05:aa:d3:d6:00:
27:a2:a0:13:ac:fd:36:cb:4e:11:42:d8:84:27:23:
8f:bb:c7:d4:48:39:84:b4:6e:af:3f:7b:6b:3a:3b:
41:fa:c1:d0:fe:8f:83:62:9b:26:33:1f:00:4f:50:
5a:78:ae:b1:9f:f4:88:77:13:48:18:99:41:39:53:
36:4a:38:c3:93:b8:18:96:b2:d1:f3:5f:69:de:46:
ea:89:64:b5:a0:24:e6:bd:5f:3a:cc:33:41:97:3b:
42:8f:bd:a2:1a:b3:82:58:f6:aa:84:45:7c:97:60:
0e:7e:71:8e:5d:4b:c5:fd:11:af:37:cc:19:87:22:
e0:44:36:38:da:46:4b:bd:ea:1b:60:a4:24:dc:98:
a4:fd:0c:00:6a:3f:7d:e1:48:78:d3:1a:cc:f3:dd:
11:e8:35:57:a1:2b:2d:31:a2:c7:21:a1:4a:35:03:
61:b2:97:0f:36:d9:41:96:f6:bc:9c:22:9b:f5:6e:
c7:76:18:c2:34:c2:a5:83:23:70:b2:77:7c:5e:c7:
b1:61:08:be:82:40:a7:85:16:61:10:7e:88:36:04:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:73:AD:BD:00:5A:69:B1:83:26:3A:49:4F:41:3E:57:BC:9A:4D
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:2d:75:cf:5f:3e:19:64:7e:ba:bf:ac:cf:ff:4b:86:ec:
af:03:c8:88:1d:96:3e:ff:c5:9d:cc:3d:dc:8b:ec:04:9d:26:
18:da:d3:77:fc:c4:f5:b3:77:4a:e2:15:97:54:49:41:46:3b:
56:2e:22:b0:fb:93:47:f2:29:1a:e7:b2:96:65:79:17:b9:57:
76:81:40:17:fa:f4:a9:0d:3a:40:49:a5:80:fd:bb:e0:39:2f:
3c:ca:c0:56:82:24:9b:c7:ca:e5:15:19:71:70:45:f3:24:78:
5b:0e:83:d2:6f:c2:cf:3e:3b:e6:e3:3f:63:07:40:10:0c:3b:
c7:f2:60:85:a9:47:c3:d4:14:77:5e:d7:88:9e:0f:03:c8:88:
43:dd:b5:35:70:43:18:e3:f6:ad:90:e2:53:1e:7a:db:d6:5d:
c7:e4:81:9a:80:b3:86:a3:67:3d:c4:79:ac:86:a6:b7:1a:ec:
f5:99:9e:8d:97:0a:ed:ae:85:af:71:fd:a0:11:f6:cf:68:69:
ad:9d:17:c1:26:36:7c:37:cf:90:89:e9:0b:76:f6:c8:c4:ae:
79:cd:56:57:2c:bd:75:a6:49:38:e5:5f:a4:13:9a:85:58:01:
f6:75:a5:70:ce:7f:46:2f:06:ad:1e:04:5b:df:d6:b6:6f:3a:
ed:fe:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:49 2025 by rpki-client