Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: wk9T5QOYpKeFakg/o7aOtUhsyXTdlXe5gk/Yz+j/oHs=
Subject key identifier: CD:4F:C1:DE:8A:54:37:F2:99:36:B0:C5:25:CE:3F:1C:40:AB:F7:09
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0199356E25302C0A9F1C6BD97CD1BE3EF8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 114B
Signing time: Wed 10 Sep 2025 21:00:34 +0000
Manifest this update: Wed 10 Sep 2025 21:00:34 +0000
Manifest next update: Thu 11 Sep 2025 21:00:34 +0000
Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=)
2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: NITVTOp7nZLUUWJTn/50Z+ryukT0wsHwmmSIZiKVqmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:25:30:2c:0a:9f:1c:6b:d9:7c:d1:be:3e:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Sep 10 21:00:34 2025 GMT
Not After : Sep 11 21:00:34 2025 GMT
Subject: CN=cd4fc1de8a5437f29936b0c525ce3f1c40abf709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:11:dc:a6:f3:a2:65:e5:e6:8a:31:eb:89:
db:13:6a:63:78:60:4c:04:72:ed:97:20:17:10:c2:
bf:a1:90:4d:94:fc:ed:e6:a9:1b:6c:37:3b:8b:99:
6a:da:9f:a9:69:36:9f:00:1e:b1:ac:07:8e:72:99:
51:cb:d7:ad:4c:c0:ae:cc:ca:47:29:fc:c7:b3:4f:
d9:8a:9b:ea:e3:97:06:e2:c5:c7:fc:f5:a5:32:2c:
d8:39:07:88:23:4b:59:cb:2f:6d:7c:29:7d:62:d0:
f5:44:84:5c:7f:83:05:03:13:f4:41:0a:f6:8e:7e:
54:29:e7:d6:7c:f4:93:ab:79:87:3b:3b:af:51:1b:
d3:ae:4d:6e:77:74:25:b2:f6:ea:0a:be:e1:70:56:
6f:db:1b:cf:80:e2:89:84:6e:81:5f:5c:a0:45:15:
74:be:65:0b:c9:ab:bb:7b:81:e8:3a:72:f0:04:75:
42:ff:ac:29:61:e3:3f:78:72:7c:ee:de:6a:58:de:
82:fe:3d:db:3f:2b:b6:d3:67:c0:04:3b:bc:ca:0f:
36:6c:16:f9:95:a7:d4:e6:fa:e5:56:a6:ff:e8:12:
dc:d9:fb:c4:c4:8c:3c:70:1b:96:2d:9c:f5:17:b4:
e8:23:eb:ad:b9:eb:db:7a:36:f1:7d:d3:b1:69:43:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:C1:DE:8A:54:37:F2:99:36:B0:C5:25:CE:3F:1C:40:AB:F7:09
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:53:7b:c5:a9:f8:4d:7a:00:67:8b:03:d6:c1:b1:4f:63:dc:
61:08:48:f8:c9:6b:6d:98:ec:2e:46:cd:ae:7b:1f:14:4c:9d:
2a:55:80:21:3b:9f:19:d2:83:b5:7a:73:c7:d7:4e:81:cb:a1:
75:66:91:69:a7:ff:47:c7:27:b6:53:47:7c:e1:a7:40:94:e9:
a0:31:8b:6a:de:ed:5d:c5:02:66:64:e3:97:8d:d0:5e:87:88:
8c:9c:02:f9:28:5f:63:41:99:31:03:6a:ea:c4:14:13:90:a2:
41:a1:94:ab:5e:fc:25:80:96:c8:36:7c:29:37:f2:73:57:10:
38:89:9e:84:ff:11:8c:da:90:5a:f2:86:47:ca:06:0e:86:87:
c9:51:eb:0b:1d:82:e8:aa:ca:5d:b2:9a:4a:ac:b5:a9:d8:05:
ff:8c:40:6c:21:98:a8:65:78:49:b8:45:c6:8f:e5:4f:88:92:
6d:39:9d:c1:fa:2a:e6:19:17:dd:0b:77:c9:ee:10:1a:ad:2c:
17:a8:67:79:b8:3c:d5:6c:d8:f8:d8:dd:74:24:82:38:cc:b9:
fc:08:cf:02:cb:14:a6:42:f5:e5:97:59:82:f5:6f:7c:e8:a1:
47:a4:69:1a:5d:2b:54:04:ab:b0:67:01:34:f3:28:db:6d:0b:
7a:79:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:55:59 2025 by rpki-client