Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: BJY5XzEIzOdPi3XMfdaaHSKKxzwsqFMuZ0Zyq/a7yXU=
Subject key identifier: C4:A0:28:6E:D5:2C:B6:8D:85:AA:60:24:F6:53:D3:37:80:75:44:33
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01993612F206D177D12E4459ECFC9A587778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 15C3
Signing time: Thu 11 Sep 2025 00:00:35 +0000
Manifest this update: Thu 11 Sep 2025 00:00:35 +0000
Manifest next update: Fri 12 Sep 2025 00:00:35 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: iSNjED8GIqO6hjL/k0TrhD+LeLDt9NOiwrGia2its1M=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:f2:06:d1:77:d1:2e:44:59:ec:fc:9a:58:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Sep 11 00:00:35 2025 GMT
Not After : Sep 12 00:00:35 2025 GMT
Subject: CN=c4a0286ed52cb68d85aa6024f653d33780754433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:cf:d9:3a:e6:c3:2c:0f:09:3b:a6:dc:71:
88:88:cf:90:c6:ba:d1:cb:66:05:c2:de:01:d4:c3:
8f:dd:12:8d:0b:f4:0c:a4:4a:f1:84:0e:29:0a:91:
f5:0f:73:9d:1c:41:14:c4:9f:91:e9:51:38:53:29:
df:e9:89:b4:9e:11:4b:62:4b:93:2f:a5:23:ce:bf:
68:53:11:49:e9:eb:27:34:c4:a4:28:76:e9:b7:64:
56:53:b5:c9:4e:ce:1b:3c:8c:72:6d:01:b5:37:5f:
0c:18:b6:43:8e:b5:07:59:18:f3:17:86:6d:c2:54:
9b:50:4b:4c:fe:30:d5:cf:d1:1e:bb:c8:30:e2:e1:
3c:05:6a:0c:b8:eb:ff:0e:e4:00:53:42:7a:da:1c:
2a:81:80:29:99:2a:83:3f:ed:c9:96:3c:66:cd:57:
53:cf:93:84:fa:01:e9:1b:54:b6:f0:36:be:66:e9:
1d:ed:0a:6a:e9:51:68:bf:4d:65:b9:56:b9:4f:5d:
2d:4d:51:9b:85:5f:89:bd:90:df:b2:b1:97:6a:b6:
f9:cc:84:c7:3e:3a:9a:f0:14:8b:36:47:18:57:c2:
aa:6e:52:5c:6a:42:e2:b8:b8:c7:fd:5b:4f:79:9f:
4e:0a:bf:4b:28:9e:50:ca:ed:cd:e5:dd:10:50:70:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:28:6E:D5:2C:B6:8D:85:AA:60:24:F6:53:D3:37:80:75:44:33
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:61:77:bf:5c:b2:85:06:cc:88:74:dd:d1:8e:84:a5:17:
08:73:0c:41:b1:41:db:43:7f:6f:6a:94:98:00:b9:bc:2a:a7:
82:52:ba:b9:74:2d:02:67:ab:1e:b1:8e:77:b8:ad:61:ce:b7:
ea:2f:3d:26:4b:b5:d8:fd:6b:98:6f:06:11:25:33:e7:41:9a:
e0:68:50:15:2f:79:af:b9:a7:be:07:32:f3:9d:4e:ff:da:88:
f0:04:a7:84:cb:8c:cb:77:7d:75:f6:0d:22:d2:33:22:7b:9d:
81:fd:69:90:44:6b:45:53:10:b9:19:76:fe:e4:a1:25:42:f9:
6b:a7:07:c8:8f:93:d2:a0:11:16:06:cd:c1:2b:a0:60:1d:5c:
2d:70:a1:d5:eb:43:d8:f5:b6:93:00:42:55:cc:12:9d:8d:e7:
be:86:49:15:14:3e:41:fe:52:28:76:70:36:25:2f:a0:e2:25:
53:ce:1e:41:c4:d5:2a:89:0b:fc:8b:4f:cb:6b:b2:9b:7d:fc:
d9:81:cc:58:1d:5c:ae:6d:5f:78:62:1c:21:2b:3a:14:f2:00:
d8:5b:ba:a0:98:67:08:c4:f3:0a:06:6e:11:e5:f3:e5:86:bd:
2f:9d:9d:cb:aa:8d:bc:05:3c:ee:13:a6:e0:07:e3:b5:0a:4c:
6b:c6:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:07:54 2025 by rpki-client