Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: Cre4R2uSKz6xQ4lj3y5cpaScDU4ypDopXTitF9HiDBA=
Subject key identifier: 2E:DB:A9:84:84:1A:20:F9:5D:9F:B1:BB:BF:F9:9D:8F:DB:32:66:07
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019932A44DE0592F3D9A181F0CBEA50656AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 04AF
Signing time: Wed 10 Sep 2025 08:00:52 +0000
Manifest this update: Wed 10 Sep 2025 08:00:52 +0000
Manifest next update: Thu 11 Sep 2025 08:00:52 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: reYQaElzdfrK5fNlmOEY7E2CAG2kkJb1+iJOGyc9PDA=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:4d:e0:59:2f:3d:9a:18:1f:0c:be:a5:06:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Sep 10 08:00:52 2025 GMT
Not After : Sep 11 08:00:52 2025 GMT
Subject: CN=2edba984841a20f95d9fb1bbbff99d8fdb326607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:ff:99:09:d5:10:d4:ce:bd:ba:e4:79:e5:
9e:7c:02:1e:0a:53:f5:a7:b4:99:f5:82:c2:39:f2:
ea:e4:5e:26:d2:68:97:4e:91:49:c1:3d:93:45:e9:
d1:bb:39:e0:6b:b3:55:d7:0c:65:0a:e9:ca:28:26:
c5:88:2b:9f:40:4e:8d:4f:0c:2c:16:2d:cd:8b:af:
b5:bf:35:e8:8d:75:83:5d:35:f0:9b:e2:3a:20:0d:
ec:f6:86:d5:01:c5:72:b3:a0:43:ca:a4:3c:42:db:
9d:9d:99:e1:60:bc:2a:ad:7b:61:af:25:d9:6d:e9:
11:8f:01:39:04:7a:2c:17:5d:dd:1f:f9:99:74:dc:
47:e4:15:47:26:18:14:d0:68:6c:23:d0:65:77:59:
a9:8a:6d:a6:c5:06:89:c7:8e:93:6a:9b:69:a6:bc:
09:43:9f:18:27:8b:85:4b:4e:df:ea:79:ee:94:e4:
4b:f1:8d:ee:af:66:e8:96:e2:27:95:f1:2b:a9:ee:
60:dd:59:30:d2:28:8b:3b:f3:82:33:c4:d9:1d:66:
0d:d4:0b:74:18:b5:58:f7:3d:7f:66:fa:f0:55:6a:
d1:59:41:bc:dd:b0:b2:f0:1e:aa:15:cb:b3:59:bc:
25:e8:ac:df:53:54:37:b2:46:95:01:ec:10:07:42:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:A9:84:84:1A:20:F9:5D:9F:B1:BB:BF:F9:9D:8F:DB:32:66:07
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2b:14:51:45:99:17:c2:1f:03:57:f1:af:03:87:4b:29:48:
96:f6:82:dc:91:46:e6:5e:eb:f4:8a:6e:57:a2:ae:f7:cc:7a:
6c:34:9a:31:01:c6:57:8d:36:39:8e:11:6c:99:3f:8c:e4:9c:
31:88:2a:01:c1:34:d4:83:47:cf:0a:c0:ac:d6:ec:39:e6:49:
fd:a2:af:df:16:da:48:59:4c:4e:bc:a6:62:c4:6e:a2:8c:14:
a3:ae:b7:9e:fa:d6:79:87:31:e2:82:06:d8:2f:94:c6:04:6c:
27:49:c9:e3:ba:5c:cc:5c:6c:cf:e4:98:7f:31:45:12:08:a5:
42:bc:7b:2a:85:a3:f6:6b:c0:ad:15:36:cd:6e:a4:c8:f7:cc:
08:9c:0e:99:27:00:49:bb:be:62:52:6f:32:fc:2e:5b:a1:76:
a9:34:1c:29:fa:99:86:1e:36:26:16:6d:44:2e:9c:5b:9f:9a:
ca:eb:49:b0:c9:8d:fd:d4:3e:e3:a4:5c:2d:1d:ea:43:b0:7b:
23:4c:55:3e:c3:89:11:95:66:f3:d8:32:01:2c:75:28:4a:40:
aa:7e:28:5e:ef:2f:d4:fb:85:1a:c2:6c:07:6e:66:d2:cc:47:
f9:2b:6b:f2:5f:97:0f:b7:bd:5a:af:ad:c3:62:c1:3d:f5:2c:
29:b9:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:57:09 2025 by rpki-client