Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: Bi8VTVo0jzNc9yNnmI9QwXPOgW5rF0W+ZxukFyxdp0s=
Subject key identifier: 12:C5:41:D6:74:AA:B2:F1:76:FD:7E:1C:58:73:9C:08:15:E0:8D:8A
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 01984AAEEE1E06A28F35A0561A97AB2C6BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 10D0
Signing time: Sun 27 Jul 2025 07:00:34 +0000
Manifest this update: Sun 27 Jul 2025 07:00:34 +0000
Manifest next update: Mon 28 Jul 2025 07:00:34 +0000
Files and hashes: 1: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
2: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
3: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: jO1HSw2I5/Tml9DtmyrXDJ6kqcqXhmCXvMc9vY8DQaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ee:1e:06:a2:8f:35:a0:56:1a:97:ab:2c:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jul 27 07:00:34 2025 GMT
Not After : Jul 28 07:00:34 2025 GMT
Subject: CN=12c541d674aab2f176fd7e1c58739c0815e08d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:b6:ec:a6:59:62:64:fe:d4:77:7a:31:d8:
12:1b:9c:b0:28:3d:10:a7:75:5b:21:06:29:9f:7d:
88:d0:80:b0:13:aa:ff:f8:71:34:76:2c:ac:59:31:
21:66:3b:29:ce:47:d5:60:99:37:ec:34:61:e5:54:
69:60:f3:79:05:2b:21:aa:f4:01:b4:09:33:ff:84:
a7:3c:eb:1f:ca:5b:75:49:80:e7:4e:de:ff:91:b3:
0a:8d:39:3d:8e:b3:d9:95:a6:05:37:8d:a5:59:c7:
8f:b1:47:45:e5:dc:fb:c1:4a:6d:cd:de:00:bd:af:
74:89:03:dc:a2:a5:ba:7d:93:c8:5b:a8:08:8c:1f:
64:1b:99:d3:85:fd:b3:3a:55:e6:5d:1a:f9:2d:09:
ef:3d:cc:43:d2:3e:13:cd:03:d0:4a:81:f6:ec:e5:
e9:f7:5c:79:04:72:3b:1a:7c:cf:9f:dd:dc:b6:d7:
d8:12:91:90:cd:53:89:3d:19:dd:5f:56:dd:5a:91:
9d:20:a0:97:15:a6:75:57:da:f7:a3:b8:28:63:85:
dc:00:9c:5b:16:e6:19:b0:01:39:29:7a:c3:1b:de:
71:f9:38:3c:7c:94:61:d3:a9:a7:ed:03:19:51:3f:
8b:5b:cc:39:b5:44:89:a4:89:e2:5b:a0:20:e2:44:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:41:D6:74:AA:B2:F1:76:FD:7E:1C:58:73:9C:08:15:E0:8D:8A
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bb:53:90:24:fd:89:8b:80:c9:89:d5:43:03:6c:1a:e0:27:
37:45:bb:c9:60:cf:19:95:e7:37:7c:c7:0c:cc:74:45:c0:b1:
35:fa:cb:11:71:a7:38:7d:af:63:39:34:e5:8f:02:71:94:19:
85:4f:b3:57:0c:5f:df:1b:86:97:1f:36:86:be:6c:be:2a:c5:
41:77:9e:ed:74:4f:b4:53:c1:92:a7:e1:fd:c4:d5:3f:9c:db:
32:e7:ca:42:bb:17:dd:9e:49:ca:70:ab:27:70:fe:c2:f7:35:
fd:53:ae:fe:f9:94:31:58:4e:8a:52:04:cb:6b:45:b6:09:83:
0a:b5:3b:1b:10:88:3b:cf:a5:d9:bf:6c:41:36:57:28:40:85:
6e:82:28:ef:58:c0:43:57:04:24:a7:0b:8a:14:d4:29:91:6d:
de:64:be:96:0d:5f:3d:72:8d:98:20:05:86:5f:ad:a8:62:d2:
07:2f:32:ad:5b:0b:41:92:bf:58:9d:25:f1:6c:b3:a0:ce:bb:
78:66:74:e6:50:8c:18:14:36:fe:6b:83:df:ac:70:45:92:d6:
6c:4e:64:a0:77:84:b0:2e:8b:26:b3:7e:3c:1e:51:e5:6f:38:
0d:8f:30:e6:46:c5:ce:17:32:10:9e:bc:62:63:b9:2a:06:67:
db:e2:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:40:07 2025 by rpki-client