Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
File: jha95kqam7o_-hQ4oZesP5SYn68.mft (raw, json)
Hash identifier: 7pMLHddslrWGdOtnWtLf25Ukethsf8P+6I5en3g4tkI=
Subject key identifier: 6D:CA:AF:39:CA:8F:65:85:FD:AD:3E:8A:AE:DA:59:80:5E:ED:E0:EE
Authority key identifier: 8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
Certificate issuer: /CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Certificate serial: 0199529E72A58112D2101381C9A7CF2CDD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
Manifest number: 0A1E
Signing time: Tue 16 Sep 2025 13:02:19 +0000
Manifest this update: Tue 16 Sep 2025 13:02:19 +0000
Manifest next update: Wed 17 Sep 2025 13:02:19 +0000
Files and hashes: 1: jha95kqam7o_-hQ4oZesP5SYn68.crl (hash: kXQDnONwKt3gsRv6FOo3bsm+n2LKLxuW5Op/NZQc0Q8=)
2: lgcKgcRNJg401G2YURIZe_B5NuU.roa (hash: uy67hQlFG6+Rikv9aAochHvjUmoKf+eqiNInXnUkhzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:9e:72:a5:81:12:d2:10:13:81:c9:a7:cf:2c:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e16bde64a9a9bba3ffa1438a197ac3f94989faf
Validity
Not Before: Sep 16 13:02:19 2025 GMT
Not After : Sep 17 13:02:19 2025 GMT
Subject: CN=6dcaaf39ca8f6585fdad3e8aaeda59805eede0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:d6:d9:bb:5c:30:e3:9d:3e:f4:c6:a3:ac:
78:f5:1d:f0:1a:33:de:0f:fe:81:01:9d:f0:7d:ef:
e9:17:8f:61:a2:9a:fa:57:6b:b4:4e:7e:f2:be:7b:
29:88:73:68:24:18:93:fd:81:ec:12:77:9f:e8:b7:
97:34:ce:a0:43:0e:f6:04:5d:ff:a4:c4:e2:19:5c:
41:28:61:22:83:70:fc:8c:92:f1:91:20:61:50:8d:
c6:ee:0a:ae:1f:69:ef:b5:74:e8:31:56:0c:80:52:
02:8a:5c:8c:35:ff:73:00:35:6f:97:0d:db:c5:db:
53:3b:de:6d:00:e2:a0:8a:ea:c0:27:b4:83:34:80:
aa:e8:76:7a:67:49:53:b9:fb:16:8b:ca:c0:c8:38:
5e:18:f7:ea:3b:10:f0:6b:3b:77:a8:1c:8d:c2:32:
ec:a5:ea:82:ae:e3:7b:04:d3:c0:a3:01:a2:8f:9b:
d6:ec:93:06:53:89:39:b2:6c:e2:2a:6d:ad:e5:56:
aa:39:44:7d:39:07:83:e7:2b:63:84:e1:18:73:cb:
5d:31:88:4c:10:85:2e:51:26:17:8b:bc:16:34:9f:
ee:3f:99:99:08:6f:3a:77:35:1d:f7:36:45:64:f2:
f2:57:3a:6c:63:6b:a7:89:a0:c1:64:6e:a0:cc:9d:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:AF:39:CA:8F:65:85:FD:AD:3E:8A:AE:DA:59:80:5E:ED:E0:EE
X509v3 Authority Key Identifier:
keyid:8E:16:BD:E6:4A:9A:9B:BA:3F:FA:14:38:A1:97:AC:3F:94:98:9F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jha95kqam7o_-hQ4oZesP5SYn68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/39ab2e-feeb-4a0e-8740-45296c32f0a3/1/jha95kqam7o_-hQ4oZesP5SYn68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:86:d9:dc:2c:06:8f:cc:13:61:43:a2:b3:2a:bb:1e:d6:16:
d3:3d:47:db:36:af:c8:fd:de:a0:2f:a1:fa:79:fa:c9:57:2f:
d5:82:7c:9f:59:70:c8:0c:c5:09:45:fc:d7:80:bb:7a:ff:0b:
d7:f5:33:0e:4d:f3:3d:98:f3:45:7a:12:cd:f2:4e:dc:41:12:
85:5b:9c:98:cd:0f:52:67:f1:03:24:38:1a:0f:95:06:9a:a1:
e0:a8:7e:36:d2:21:d6:bb:a6:33:4f:a1:95:da:3e:63:05:91:
51:ed:82:1d:a8:86:ce:5a:01:cf:63:95:bc:9e:aa:b8:3c:90:
11:8d:09:9e:44:4d:85:bd:0c:6e:45:4b:4a:76:ed:64:ef:91:
ce:9c:31:ef:90:fd:af:0c:6e:b3:c2:60:96:3c:09:c6:48:30:
d0:d5:2d:16:01:ea:13:ec:d8:d6:c7:5d:74:6b:b3:1f:f2:91:
ba:a1:4f:b5:8c:67:bd:fc:83:a1:bf:b2:15:46:65:24:3d:e6:
cb:32:cd:89:af:c8:24:ed:b0:3e:d0:ec:d6:fa:54:c2:dd:c7:
9b:46:76:8c:c4:bd:03:b0:11:6b:cc:b7:8c:e4:b2:16:4f:15:
a4:da:f0:46:87:20:36:94:40:25:99:b1:e0:06:32:b2:2f:c8:
46:7a:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:43:40 2025 by rpki-client