Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: 45gEl5mmr4gVXqwEpUkdzzJjgOni+tuO+R4Lra6HymE=
Subject key identifier: 41:E6:F2:2F:B4:B6:7D:77:18:D3:50:B1:BE:1F:EE:B1:EA:E8:F3:BF
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 01993649D6E866C49C862E39AB0D535D3449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 12A2
Signing time: Thu 11 Sep 2025 01:00:32 +0000
Manifest this update: Thu 11 Sep 2025 01:00:32 +0000
Manifest next update: Fri 12 Sep 2025 01:00:32 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: ULQZllkd0obeNBUl/G6vihULxXeDBVW0jfvnYIUAd+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:49:d6:e8:66:c4:9c:86:2e:39:ab:0d:53:5d:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Sep 11 01:00:32 2025 GMT
Not After : Sep 12 01:00:32 2025 GMT
Subject: CN=41e6f22fb4b67d7718d350b1be1feeb1eae8f3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:e1:4d:e8:9d:3b:ed:44:e0:b7:17:af:f5:
a2:fd:d5:3d:e3:12:33:73:42:37:22:21:e8:1c:78:
5b:dc:59:df:b5:9e:3b:f6:bf:6b:52:59:7f:02:d4:
25:45:2b:5e:1a:3f:68:9e:5f:41:5c:81:47:be:f8:
67:96:e3:f4:93:4e:79:b0:db:3f:b2:65:16:de:95:
d7:7c:69:85:47:ce:ae:a1:c2:4f:0c:a4:06:f6:71:
8d:82:58:a7:82:c9:8b:16:71:ab:2e:c3:f8:c1:12:
55:d1:d8:a1:f7:87:7f:65:1e:47:f5:96:e1:db:ba:
28:0f:8b:95:b3:cb:f6:c0:83:0f:32:75:9c:52:aa:
30:df:2c:66:dd:2e:51:93:fd:5c:e8:ab:52:de:6f:
b8:2c:79:25:9c:f5:14:ae:cd:78:64:a6:c4:b1:5c:
d9:0b:2b:34:66:2b:99:62:2f:4d:63:fe:74:5e:b6:
cf:79:4e:50:e0:49:1f:70:ac:9c:34:49:ff:2c:6e:
2b:9c:04:7a:a3:41:51:50:aa:73:42:ad:99:52:c0:
e2:0f:a7:d6:b0:22:aa:cb:84:fe:69:ed:9b:42:66:
cc:5b:95:b8:30:4f:f9:dc:2a:1a:f7:5c:0a:62:e4:
b9:bb:82:33:00:28:9a:57:d3:5c:36:c8:60:c2:84:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:F2:2F:B4:B6:7D:77:18:D3:50:B1:BE:1F:EE:B1:EA:E8:F3:BF
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:45:a2:03:da:b1:1a:b7:1f:9b:c5:f3:d7:2f:eb:00:83:
64:3f:46:6e:35:ec:e8:97:ea:7e:26:8a:6c:d1:24:43:7a:e0:
8f:2f:18:72:dd:f6:29:fc:48:bd:ee:88:36:8f:41:99:70:e5:
c8:68:02:d0:68:4e:06:78:4f:51:01:a7:f3:63:ad:5d:d7:91:
4b:4d:98:bd:43:98:ab:b6:44:7e:3b:e8:b9:e8:56:be:63:0a:
cc:04:3c:53:df:9e:84:96:3c:c9:53:a0:bf:c0:6e:68:7c:2a:
9a:76:56:a0:90:36:62:6a:fd:ab:fb:be:96:54:5b:06:52:4b:
c2:d5:26:65:0e:ee:83:a1:53:b8:56:e9:87:7d:0c:4d:1f:d1:
ea:c6:ee:33:1a:c3:ba:40:b8:18:48:ab:50:ef:6f:61:18:25:
e4:3b:5f:48:51:93:44:0d:e4:e3:3c:75:45:56:b7:b4:e4:8c:
c1:68:dc:d0:2b:d0:0a:e7:1a:ce:ea:3b:5f:81:f4:90:19:90:
d4:b0:5e:0d:9c:6e:54:ad:40:78:c5:2a:95:d3:45:09:8b:47:
38:dc:fe:2b:7a:e4:10:62:36:c0:1d:b9:e1:e2:eb:45:fd:c7:
5c:f8:e5:49:16:61:85:2f:f2:9c:a5:39:5c:37:80:c2:84:cc:
ee:a7:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:40:15 2025 by rpki-client