Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: 35btuGalNZ5QIjBplLTMr6ZvIDa5iVnSIrTKjNr3kms=
Subject key identifier: 37:69:3D:49:8D:EA:1F:95:6B:A1:8D:39:04:51:76:F8:A7:99:2A:22
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019922FA9B1C63C4C4BB8901C69991D825C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 039E
Signing time: Sun 07 Sep 2025 07:01:12 +0000
Manifest this update: Sun 07 Sep 2025 07:01:12 +0000
Manifest next update: Mon 08 Sep 2025 07:01:12 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: ndnycFIF+1g52hFt7ROggtG9IGeurOm1Ul2KwPoIDkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9b:1c:63:c4:c4:bb:89:01:c6:99:91:d8:25:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Sep 7 07:01:12 2025 GMT
Not After : Sep 8 07:01:12 2025 GMT
Subject: CN=37693d498dea1f956ba18d39045176f8a7992a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:b2:b2:43:60:17:f9:e6:b7:9e:58:79:1f:
41:80:d6:37:e5:08:53:69:3e:ce:53:9b:5b:51:ad:
0a:b0:12:f4:4a:c0:44:02:df:87:9e:e6:f4:98:41:
c9:49:30:f8:d1:d7:ca:5e:c8:52:3b:3c:58:25:b0:
44:79:b4:43:19:24:74:b5:09:01:31:b3:23:65:1c:
c7:bb:0a:13:1b:87:29:0f:9b:16:9f:bb:3b:93:e9:
ab:4f:cf:84:08:5a:85:78:cb:a3:d7:e6:c3:98:d6:
4d:d3:0a:bd:e0:6e:8b:ff:e5:86:79:1c:35:a2:30:
09:f1:92:e0:9d:c2:b0:3e:14:df:49:36:c3:fa:82:
c9:5d:44:9c:2c:21:84:87:1b:37:ac:99:1c:5e:51:
75:d7:59:8a:95:a0:f5:c5:bc:25:f3:96:d7:d9:2d:
31:4e:cd:a5:aa:02:62:2f:f2:e4:c7:79:13:d4:9c:
ed:b9:42:b0:bf:94:c2:34:17:bd:24:2c:03:ae:00:
13:ab:1c:44:d1:e1:24:0d:e8:33:f0:9b:ca:76:12:
f5:b3:f1:2f:e6:4f:3f:c9:9d:a8:26:4c:5c:f9:3d:
41:de:db:4e:c7:b1:f1:e7:46:96:60:e1:0c:02:0d:
b1:68:ce:d3:b0:bf:bd:d1:16:9d:29:e5:da:c6:d9:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:3D:49:8D:EA:1F:95:6B:A1:8D:39:04:51:76:F8:A7:99:2A:22
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:82:1d:3c:bb:2f:b3:50:5b:1c:21:4a:1f:59:76:57:fe:
f9:b9:04:d0:d6:d0:3f:a4:3b:6d:f7:04:f2:fe:f5:67:63:1d:
7e:0b:a2:ed:27:06:eb:c7:d5:fd:ec:58:9a:8a:5a:1f:46:31:
3d:b6:6c:61:a3:a1:05:ba:30:db:e7:14:90:e0:f3:67:ec:7b:
b9:fc:cd:4d:64:d1:67:33:2c:a1:11:eb:07:77:79:50:ce:2e:
e9:58:8e:d6:68:ba:69:5e:fd:39:b7:b6:06:34:de:82:4e:4d:
2e:ee:a2:54:96:6e:13:50:8d:c0:93:bb:36:09:c6:08:38:7d:
77:52:42:42:a6:4f:34:3a:86:62:61:d5:01:3c:77:91:af:c7:
d9:03:e0:7c:26:0b:01:40:56:08:b2:91:01:2e:58:fc:e6:95:
43:f2:58:46:95:03:db:c4:b9:05:78:5e:8a:48:ee:60:b8:3b:
98:cd:47:33:10:eb:77:ea:57:fe:cb:b4:80:2b:7e:3e:7c:7c:
47:2d:68:eb:dc:60:0b:e4:14:b5:25:ab:3a:4a:df:ea:e5:76:
74:7d:45:3e:86:4a:a3:ad:d8:85:03:71:33:76:bc:e0:cc:d8:
54:01:ae:05:57:d2:a5:6d:f2:05:00:dd:07:57:1d:5b:20:44:
9c:7c:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:00 2025 by rpki-client