Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: +zl3u7CpPdaJ53lGQxuJNYgm3uJ19FGa42zIMnB9Os8=
Subject key identifier: 3A:9C:CA:91:F9:26:15:16:21:C7:6A:A6:1C:92:B5:56:C1:87:7D:07
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019931253014E0735E0D6F6BE449FBDFCD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1683
Signing time: Wed 10 Sep 2025 01:02:24 +0000
Manifest this update: Wed 10 Sep 2025 01:02:24 +0000
Manifest next update: Thu 11 Sep 2025 01:02:24 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: kkN0xjIkgIUa7/SfCAsUf0ZxDNqYxKmyi8WZ/dOUPvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:30:14:e0:73:5e:0d:6f:6b:e4:49:fb:df:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Sep 10 01:02:24 2025 GMT
Not After : Sep 11 01:02:24 2025 GMT
Subject: CN=3a9cca91f926151621c76aa61c92b556c1877d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:93:18:35:eb:82:e9:5e:ee:26:0a:53:e4:
43:65:bd:4d:6c:81:f3:ab:84:13:16:aa:9b:a2:53:
1e:af:37:8f:18:90:13:50:34:f1:82:9b:bc:59:85:
d8:81:6e:f0:ec:63:2f:35:1a:95:78:00:48:87:4f:
22:80:cb:69:71:fa:15:5b:af:6d:2f:99:e6:cf:61:
b3:c0:d3:e3:45:57:e3:14:46:0a:86:e9:20:71:d4:
72:58:f9:5c:84:4b:62:ab:fd:4e:cf:93:57:34:4d:
2c:ca:f3:ab:75:23:4c:e8:42:28:93:be:d0:f6:32:
a8:bf:e3:0e:46:fd:07:d7:2c:66:5a:88:55:76:cf:
c8:2a:cc:0d:be:b6:70:32:7f:18:6d:8d:24:02:5c:
e4:74:d0:fd:5b:4a:db:30:3a:b2:5b:e8:09:2f:46:
9c:06:3a:a9:76:08:1f:ab:35:20:47:64:4e:57:27:
8f:2d:d2:3c:71:c0:48:48:f6:ef:05:6c:0e:92:0b:
13:52:76:bf:ca:8c:ec:5e:79:9b:d2:c0:17:d8:1a:
2f:43:95:b2:14:aa:37:0e:76:01:06:d6:ec:c3:02:
a2:4f:ef:e0:c7:1f:81:11:1b:68:66:c3:2d:8f:4a:
7a:ac:83:27:82:8a:fd:81:bc:a6:64:08:07:41:ed:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:CA:91:F9:26:15:16:21:C7:6A:A6:1C:92:B5:56:C1:87:7D:07
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:3f:8a:cc:44:df:a2:32:89:41:c5:32:8c:c5:56:c5:b7:92:
c2:95:af:98:54:6f:2d:3f:ae:75:36:a7:81:3a:a0:aa:dd:41:
c0:d3:7a:68:e5:45:44:aa:d4:42:07:ea:45:d1:c1:72:9b:01:
56:a4:11:75:c4:c9:c8:08:b9:f9:44:dd:55:c5:d5:a7:e7:ec:
4e:21:fa:38:40:f3:b4:1f:58:f9:68:7e:a0:bd:b8:2c:f3:0b:
af:49:34:78:03:26:e3:95:6e:fa:56:4a:8e:2b:1f:2e:22:a4:
d1:69:84:73:90:4f:27:9c:b4:61:bf:f0:ac:50:33:98:a9:97:
69:a7:3f:11:8a:ef:83:a8:7f:90:bb:a0:b3:90:6b:20:85:3e:
67:03:18:25:48:61:65:43:ee:f7:84:5c:67:be:e5:fe:e6:45:
47:08:48:db:4c:fe:e3:79:77:56:e8:d1:33:59:e2:8a:3d:0d:
07:94:bc:52:6e:fc:b5:7b:ee:96:cd:5b:7c:8f:8d:39:c2:9d:
38:9d:8b:36:50:b7:d8:01:e6:8a:9d:23:d1:d8:92:4f:6f:4a:
ed:32:f0:36:34:36:19:a7:9b:95:fc:d9:ed:54:fe:f9:7e:3b:
bd:58:0c:84:9c:08:f2:7a:22:ac:d5:aa:fd:9c:28:c5:39:cc:
08:1e:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:30:33 2025 by rpki-client