Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier: LZjJPZ/v02SktCRsXT6paTrsjaWvLq0qM9dURMLsNFQ=
Subject key identifier: FE:59:3C:05:24:2F:96:2D:73:6D:9D:C6:0E:E1:CD:A2:33:C1:83:FB
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 0199240CCBD211ACDF16B03FF36BEB793A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number: 0EA7
Signing time: Sun 07 Sep 2025 12:00:42 +0000
Manifest this update: Sun 07 Sep 2025 12:00:42 +0000
Manifest next update: Mon 08 Sep 2025 12:00:42 +0000
Files and hashes: 1: 0hR_0c7RQJiSWec5GOXGTkJBB-o.roa (hash: 6B95v6L3QKq5sJN6SrWqfMlBSuwCIbwLv0Gvp6AwXSs=)
2: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (hash: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=)
3: SA-KGCApQAk5dV-uBcL4crTpK78.roa (hash: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=)
4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: ExCV9F0bihW/e1yQVAr4ECOZz5EwLAVKs5fKY3UJGfs=)
5: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (hash: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:cb:d2:11:ac:df:16:b0:3f:f3:6b:eb:79:3a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Sep 7 12:00:42 2025 GMT
Not After : Sep 8 12:00:42 2025 GMT
Subject: CN=fe593c05242f962d736d9dc60ee1cda233c183fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:d1:05:95:9b:e2:cc:4f:60:04:cb:43:36:
3e:82:6d:50:9a:b9:54:7f:37:21:25:eb:4e:06:4e:
03:12:9b:04:62:fc:0e:8a:42:62:1f:c5:5c:54:d5:
fd:7e:8d:70:96:5f:d1:d7:b4:42:cd:7c:8f:20:51:
64:50:1d:8a:66:a7:82:a7:ba:aa:11:06:cc:c0:00:
db:10:b3:41:cb:81:c4:be:13:b3:f7:e5:55:e2:ef:
9e:77:1f:1e:4e:54:66:b4:59:ea:cb:bf:80:e9:8e:
ef:fe:6f:a8:5f:9d:f4:d5:e4:98:41:a6:74:2a:4b:
1f:8f:89:84:9c:df:4b:db:6d:e6:1f:d7:fb:0d:48:
0a:67:d8:8b:e2:ac:a2:ac:30:8f:a8:ea:f3:b3:60:
c7:2e:96:5b:85:1c:09:65:3a:e7:27:f7:83:ef:4d:
ed:99:d1:27:41:38:77:27:bd:32:da:89:57:2a:90:
d1:5b:46:9c:58:8a:f6:ce:3e:36:7f:2c:ca:fc:96:
25:25:df:58:75:fc:c0:5d:6f:3b:d2:ce:0a:af:ea:
33:71:fa:d2:23:10:83:76:d2:43:5b:54:2c:84:89:
e4:08:aa:ed:0a:6d:1f:f9:5b:3d:b5:f5:d9:84:da:
5f:c0:bc:e6:fc:2c:75:b6:54:76:01:2e:53:0e:61:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:3C:05:24:2F:96:2D:73:6D:9D:C6:0E:E1:CD:A2:33:C1:83:FB
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0c:17:a1:e2:eb:16:18:8e:88:7e:c5:fa:c6:f4:5a:1d:b5:
ac:ea:7b:99:3c:20:d0:2a:16:39:bd:25:71:e8:bd:72:d3:79:
57:e9:55:36:4a:6f:12:34:4e:d3:f3:11:c5:cb:c8:53:83:9c:
0a:f2:fd:04:39:10:f9:a2:fa:32:8d:c3:b5:da:49:be:69:0f:
4e:cd:d3:30:cb:f2:12:e6:19:e5:dc:98:53:cc:36:99:c2:f3:
e0:65:41:2d:57:cc:ea:fc:95:3f:d6:10:d5:9d:9e:95:55:ab:
47:ed:09:ea:93:69:65:0e:d4:5a:cd:1f:b3:97:91:b2:80:32:
2d:ca:a5:ec:27:b1:7e:4e:12:6e:8e:54:80:96:4d:a9:05:eb:
c4:4a:a3:bd:86:27:e7:5b:34:02:83:59:04:23:cd:12:a7:73:
3b:41:44:32:66:0e:bf:b8:43:25:4b:30:6f:ee:c7:df:35:e5:
5a:47:9b:f2:eb:2d:8b:42:03:f1:45:bf:74:11:bc:b0:1d:7f:
ff:1a:49:18:c8:3d:cb:dc:c3:80:80:f5:39:ca:1e:fb:e1:85:
0b:ab:c9:1c:bc:be:cc:82:e0:7e:e8:ea:ef:95:a3:24:d0:af:
b6:08:9d:ff:5d:c9:e1:9a:08:24:34:c5:3c:b4:04:2a:24:e4:
45:dd:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:27 2025 by rpki-client