Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: Nf/cd+ZuAlMsWHiEL8WKqqYdVQZlpGiUjBy0Ny0H6TQ=
Subject key identifier: EA:A5:4A:6C:80:AA:93:1E:31:04:87:2B:5A:42:04:28:B5:51:A8:1F
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 019922C2FECB542FE97D4E494406A8C7BF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 035A
Signing time: Sun 07 Sep 2025 06:00:28 +0000
Manifest this update: Sun 07 Sep 2025 06:00:28 +0000
Manifest next update: Mon 08 Sep 2025 06:00:28 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: vC6vgpTOpg1u968apbIJ1ubaGOzmm+nGs9nS5GGQTaQ=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fe:cb:54:2f:e9:7d:4e:49:44:06:a8:c7:bf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Sep 7 06:00:28 2025 GMT
Not After : Sep 8 06:00:28 2025 GMT
Subject: CN=eaa54a6c80aa931e3104872b5a420428b551a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:21:0e:f8:87:51:cb:4f:5f:ca:48:da:76:
bb:89:95:6f:69:02:ad:95:29:eb:5d:be:cd:da:71:
6a:e2:ac:39:0e:af:f1:2d:4f:5e:79:44:59:e5:19:
b6:45:b3:67:04:98:02:eb:e2:e5:2b:e8:44:21:bc:
e0:3a:fe:2d:e1:24:3e:98:05:8c:26:33:2f:dd:f9:
c4:b1:3d:a8:c6:fe:36:45:68:ca:d3:fd:7f:43:4e:
9e:e0:7b:cf:dc:ea:dc:56:db:61:a7:f0:40:ad:7d:
86:89:57:c0:89:89:d8:ce:42:fd:7e:af:21:90:33:
33:0d:4d:16:1e:0e:01:0f:e8:33:bb:99:94:2d:41:
d8:65:cc:55:34:f7:f9:68:91:b6:b9:88:02:78:ef:
e8:60:03:16:d9:6d:9d:21:51:1f:16:e7:b2:2c:3b:
b8:83:d2:04:cb:5f:db:20:e7:fe:44:12:cb:42:18:
1f:d0:50:c1:9a:50:9d:56:6f:6a:db:0c:fa:f3:46:
28:f2:22:b8:0d:ac:5d:7e:0b:91:f4:79:b5:22:51:
00:79:9f:a7:88:c7:f3:e2:83:74:fa:e7:6f:ee:a0:
39:e6:2a:1f:13:c0:6f:61:86:dd:33:c3:d6:3d:ad:
e4:36:95:7e:60:93:c7:76:10:04:27:fe:6d:0b:da:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:4A:6C:80:AA:93:1E:31:04:87:2B:5A:42:04:28:B5:51:A8:1F
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:76:71:61:f8:b1:3d:ca:ff:4a:ed:e4:36:b9:1d:20:0c:72:
ec:80:d5:0d:14:be:65:b8:5d:e3:1a:41:cb:a1:d0:f0:f9:04:
0c:5c:4b:7b:d8:d0:8e:40:2a:3d:45:74:a6:41:7b:29:a9:77:
9a:5e:0e:33:44:97:cc:75:59:b7:ba:91:5a:cb:cd:ac:ad:a4:
2c:08:a7:6e:8f:6c:6d:c9:7a:47:4a:67:c1:d8:73:e8:d8:65:
74:ea:82:b6:9b:60:1d:f1:5d:dd:2f:c5:3f:ea:e3:e6:8b:15:
67:ae:b6:7c:34:26:35:cf:da:3b:c2:aa:cc:4a:1a:10:f7:8f:
f3:2e:59:8f:8a:40:46:80:ce:19:07:02:20:36:57:be:fb:99:
8b:0f:e2:76:51:db:eb:a0:44:de:bd:be:cc:9f:32:77:03:c7:
ad:62:9f:53:f3:85:01:44:81:75:24:de:57:6d:ff:cb:8c:13:
70:3c:d0:a5:62:a9:04:89:63:1e:5e:ca:f0:4e:bf:b6:e6:5c:
29:ce:2c:f0:19:e4:7d:fc:54:6b:92:dd:14:d9:3a:66:5b:cf:
bd:f8:7c:73:84:ac:b4:ef:2a:82:e0:63:7d:48:b5:94:09:f3:
b1:54:ce:9e:f0:2d:20:29:b2:a8:c5:66:74:c0:52:e2:d7:6b:
48:fd:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:41 2025 by rpki-client