Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier: WVR9iP3vDxQBgNzou94me/pKRvu3oHhen0n/j0dhcVw=
Subject key identifier: EB:7E:03:B1:66:68:CF:75:4D:EE:83:6E:07:61:75:F2:79:0F:1B:35
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 0198D6982C65D48E27B00CB167B54832BBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number: A5
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: AaqGc6BSfnPK1j4fwRiQ9B5z8Ko.roa (hash: JZb3yca7iWrB+TqkYDnL3xcicD4SCErsZ4tkUL7SBA4=)
2: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: QimvR4cWOtkvQwMVgUPedUzOW3227m8VIe6mhgaDi3w=)
5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2c:65:d4:8e:27:b0:0c:b1:67:b5:48:32:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=eb7e03b16668cf754dee836e076175f2790f1b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:0e:09:1e:e4:3f:c3:ee:76:d5:85:9b:63:
04:9f:76:4e:0f:b8:75:26:aa:9a:df:95:06:46:22:
fa:e5:b9:65:50:6a:86:39:37:06:bd:9a:51:ee:44:
0f:36:1f:3c:07:60:03:44:9c:11:1b:06:94:14:3a:
ca:ae:b3:93:1f:ca:01:8d:71:56:d2:8f:d1:0a:6a:
b0:be:65:98:30:d7:91:4f:09:16:dc:96:13:84:ee:
c3:65:ac:32:df:31:56:b3:a8:e9:f4:22:b9:91:eb:
6c:7d:f4:0c:5e:1d:07:60:61:bb:d7:ef:c7:10:cb:
cd:34:aa:1a:c2:42:3d:03:61:ca:72:4a:27:dc:94:
a2:55:11:70:14:d4:2a:5e:06:de:f9:52:4b:94:fb:
53:ff:14:1d:32:2d:93:10:74:dd:b2:3a:c6:f8:7b:
71:d0:eb:c0:5b:30:b9:e8:5d:de:63:f0:6e:57:ee:
ae:93:9d:82:bf:69:26:3e:35:99:2f:99:04:cc:c1:
87:ec:e6:8a:8c:dd:89:02:28:b2:cd:62:a3:18:eb:
71:c0:d2:7c:19:76:2b:c4:23:da:e2:c5:56:82:ba:
cd:d5:b8:c7:41:ce:a2:14:64:64:8f:a4:d4:e8:04:
de:77:48:22:2e:85:e2:2d:11:1d:13:06:de:63:4c:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:03:B1:66:68:CF:75:4D:EE:83:6E:07:61:75:F2:79:0F:1B:35
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:86:61:0b:1d:44:a0:30:30:4e:b5:59:d4:dc:e1:21:96:
23:48:e3:43:59:da:c5:0e:2a:29:69:38:29:fb:8b:25:fa:09:
a6:3f:b9:5e:43:1b:22:d0:c4:ec:bc:01:d6:e7:6a:25:08:ee:
22:b8:f9:a6:51:8e:d2:f9:57:73:27:71:ee:a8:ce:1b:02:6d:
90:41:42:b3:f0:03:83:8f:96:76:a8:ff:92:f5:59:2f:09:7e:
d7:62:0b:61:bf:54:e3:0e:3f:5f:be:5f:5a:67:ee:42:32:d7:
ab:11:00:5c:23:0b:e1:c5:20:72:db:a6:e1:f5:61:a4:0f:6d:
5b:92:91:5e:e3:87:64:f5:8a:2f:df:63:4a:1d:b8:82:0d:0a:
20:5d:36:9f:57:b6:1b:b6:bf:08:54:fe:68:fa:2c:67:70:80:
26:3b:6c:e5:95:8e:32:d0:e4:2a:74:f7:b0:b4:24:dd:24:97:
b9:14:1b:f1:96:a6:7e:79:49:31:87:4e:15:c7:91:b3:2f:66:
b6:2f:ed:70:37:fc:ef:d1:b9:57:3b:91:a4:c1:ec:ca:5e:a8:
e8:07:0b:c0:6c:7f:e8:92:a9:68:c9:1a:1d:33:cc:a6:a6:e4:
c2:a5:d3:6a:2f:29:d9:8a:56:ba:8d:3c:76:7e:9c:96:b5:11:
fb:ae:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:05 2025 by rpki-client