Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: odz+yikAZjp+qc0+fcQ7jDFXf8RcByQcFPxz9rQOY3o=
Subject key identifier: A6:FD:A4:A8:F8:63:82:E7:17:BB:08:06:F6:AA:4F:BB:A1:10:BC:11
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0198D54E62AF3033814BEBB7F517048658D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0260
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: WMrua6lqAkQsY9FtHe6PE3xk2txRrnYUXT/ALyCQcD0=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:62:af:30:33:81:4b:eb:b7:f5:17:04:86:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=a6fda4a8f86382e717bb0806f6aa4fbba110bc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:6c:80:0d:38:ce:ab:d0:fe:66:42:91:2d:
79:ce:9a:ee:68:f4:13:41:62:37:7d:96:71:63:47:
fd:be:cf:35:c6:2d:5e:0a:a3:88:a1:bb:f2:c1:b6:
b7:36:7f:55:0a:95:2f:ed:6b:64:70:54:8a:50:7e:
da:1d:83:24:26:f2:e1:ab:84:61:a0:70:e9:30:ec:
53:a0:fe:f5:3b:53:21:6e:97:05:0e:35:24:0f:04:
16:1a:57:ae:3d:92:00:68:e7:93:e5:b4:58:65:2a:
f6:7b:4d:63:a3:c2:25:bd:d2:4c:98:1e:e3:d9:e0:
a8:13:49:b5:71:c7:98:97:ee:79:cc:f5:1c:4a:9f:
80:55:29:94:9a:d5:78:f4:82:5b:18:3b:7c:06:1b:
05:75:f9:6c:de:2d:9f:cf:8f:77:57:1d:31:0c:e3:
fb:bb:96:c8:60:00:70:ae:09:70:57:b7:1d:dd:47:
86:97:70:4b:c7:c4:2c:f6:66:c9:7a:ee:b9:95:0e:
9e:fd:4f:ed:7f:45:ee:5d:08:95:23:76:4c:55:55:
b9:74:6c:6f:d6:2d:b6:e8:99:44:54:4d:d3:df:9f:
e9:f1:37:90:7e:3a:6b:bb:93:a3:8e:24:7f:2b:c4:
a6:84:2f:a6:00:99:b3:70:7b:66:60:ae:fe:da:86:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:A4:A8:F8:63:82:E7:17:BB:08:06:F6:AA:4F:BB:A1:10:BC:11
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:47:86:ce:4e:ca:97:f2:3b:56:5f:f1:19:41:c9:0e:67:
e9:48:7a:f8:68:42:30:6b:ea:b1:fd:5b:8c:61:2d:39:c7:db:
ae:25:f4:db:03:35:a0:5f:85:45:d1:22:76:fc:f4:f9:a2:12:
ad:2c:11:cc:17:37:69:7e:9b:79:f1:cf:6b:37:bb:e2:1e:9f:
ea:7d:40:3f:73:07:0f:8e:ab:0a:29:21:31:9f:70:9f:3e:27:
17:c0:82:db:23:f2:06:a4:19:78:d5:ef:05:37:85:43:14:31:
a3:78:09:76:37:72:c9:10:9d:2f:ee:1b:24:ba:92:47:55:cc:
04:7b:fb:b6:7c:aa:4c:5c:db:97:7a:76:da:07:e4:f3:9d:9b:
14:36:ac:17:77:aa:c0:2b:e2:d3:a9:87:f1:3e:ef:fe:7f:5f:
b8:21:e0:f6:42:9f:f6:b0:c9:a3:e5:3a:0f:cc:8f:b8:88:e1:
5f:b3:03:74:e4:37:55:97:d8:ee:c0:a8:cf:c5:61:07:d4:a1:
07:b5:9c:66:9f:3d:9d:fa:ca:d8:d6:78:0d:81:b5:b8:8b:29:
dc:37:6c:a1:7a:87:0c:80:a9:de:d0:bd:ff:ae:d6:b0:cf:81:
24:5d:64:8d:ce:e3:b3:36:41:4a:8e:9a:08:56:00:71:71:98:
52:01:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:34 2025 by rpki-client