Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: MVEjZ1Q0eTF/myasoNy5y2VgTyQjJHL7zgp0HQ2ODfQ=
Subject key identifier: 77:C6:3C:C0:CA:2A:55:29:99:97:05:17:E0:F3:83:20:7B:AC:DE:EC
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019932A3B75A2EDBE5619E8CCA6A30301BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 13E7
Signing time: Wed 10 Sep 2025 08:00:13 +0000
Manifest this update: Wed 10 Sep 2025 08:00:13 +0000
Manifest next update: Thu 11 Sep 2025 08:00:13 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: E57Z2NUMopu3W8BbvSaE1/wgEMwNlhqPKJydSWXNvF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:b7:5a:2e:db:e5:61:9e:8c:ca:6a:30:30:1b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Sep 10 08:00:13 2025 GMT
Not After : Sep 11 08:00:13 2025 GMT
Subject: CN=77c63cc0ca2a552999970517e0f383207bacdeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:5d:37:d3:b0:bb:6e:c1:a1:80:f4:da:ab:
c9:27:00:26:5f:a0:b9:1a:92:d1:9c:13:b5:b3:d2:
ef:fb:65:b5:88:47:de:7c:b8:06:52:3b:1a:19:2c:
56:72:95:fe:9c:3f:7d:e3:0f:19:7a:3f:68:ec:6e:
b3:4b:53:45:5a:24:4a:ef:f4:fb:07:fc:ab:53:49:
f4:e3:69:a5:1f:7c:d9:1a:12:11:75:70:86:ad:1d:
c5:0d:f1:05:e6:c3:a0:d3:88:fa:39:39:b9:e6:52:
26:0c:c8:a1:ae:26:26:53:2f:89:b6:eb:ec:46:27:
09:53:2f:3c:66:5c:c6:99:89:be:47:0f:e9:fb:a8:
60:67:5d:89:dc:f3:32:64:da:6d:fa:7f:7d:47:fa:
ba:ea:4d:f5:bc:02:49:c7:11:f1:bc:1b:7c:60:31:
6b:57:b6:66:d4:8f:81:d6:dc:1d:33:1a:63:39:dd:
b7:4c:9a:ec:6e:fc:97:f7:f9:af:99:09:35:d4:d5:
49:22:8f:fd:3e:a6:3d:82:ee:cb:d7:c6:b5:ab:f9:
1a:b7:4f:6e:4c:e0:98:b6:5b:d7:d6:99:c7:81:a9:
ab:66:ac:a4:60:c1:39:7e:8b:33:ff:09:be:2d:1f:
3d:46:a1:16:65:33:b5:19:e4:3a:be:07:eb:6e:85:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:3C:C0:CA:2A:55:29:99:97:05:17:E0:F3:83:20:7B:AC:DE:EC
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:41:0d:3b:69:f6:1d:fd:81:82:ca:9e:d1:d7:b3:62:06:35:
f9:25:bc:35:0a:4e:f3:b8:e0:70:1e:be:b5:5c:bf:6c:0a:ed:
ff:62:d0:70:31:d5:25:8c:bb:e4:b0:e5:3c:c1:a8:8a:27:20:
8f:39:0f:a3:f2:4c:e9:6f:c6:9a:fd:4f:ee:4f:d8:b3:3d:04:
f7:23:b3:69:67:85:6c:02:5b:0a:22:74:18:f2:f8:8f:96:c9:
68:2d:76:96:67:ae:5f:1c:cc:54:19:fc:ee:a5:ac:f5:25:54:
2f:57:4f:45:7b:ac:e7:5d:de:d9:fc:9e:60:db:d4:5a:08:49:
f5:13:05:4f:8b:47:6d:92:a2:e8:69:87:17:a3:63:91:c0:c8:
57:0f:29:e8:cf:ca:f3:23:e4:50:83:4f:31:ea:f8:c7:66:58:
d2:f6:88:1c:80:34:12:6b:70:15:6c:bb:d8:0f:2e:e5:93:d0:
0d:66:e7:cb:dc:8f:51:41:a9:80:0b:81:49:44:ea:da:6c:eb:
ff:aa:65:aa:7c:6c:14:72:43:4b:8f:92:ff:51:e5:82:5e:a8:
7b:4f:2c:e9:87:41:f0:a4:e5:2c:90:4f:81:78:a3:93:7e:b1:
76:14:70:46:30:74:49:aa:53:01:7f:07:e9:e6:c2:1e:65:f4:
36:2a:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:09:02 2025 by rpki-client