Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: xq9wDS1z91/VCYZUruySlKF+Y0iokEvNmqfkehdNmd4=
Subject key identifier: F7:C2:DE:DC:84:16:FB:3A:A1:A6:3A:12:F3:C6:2C:68:A0:3E:0A:82
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019922C38B21FB5EB282ED812147B5BB27FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0D06
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: P7jTC4sZTGOEhWY9qkGDLv6j9OII3+m9V5DxyGhJe3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8b:21:fb:5e:b2:82:ed:81:21:47:b5:bb:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=f7c2dedc8416fb3aa1a63a12f3c62c68a03e0a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:fd:27:ed:1b:6f:47:63:e0:bc:f7:c2:7d:
e5:8b:13:2f:d3:cd:63:c7:16:c1:b5:7c:6c:68:70:
b3:ca:ed:34:01:79:f8:b6:67:81:3f:55:33:c3:7f:
4e:f2:b3:e6:bc:b3:4b:9c:cb:ac:c9:bb:0b:c4:e7:
e8:84:e5:bc:fc:17:a5:d9:25:a5:7e:55:75:d5:68:
bf:6c:d3:b7:ef:41:56:d1:6a:9f:fd:f8:71:a6:13:
f6:c8:7f:dd:5d:20:66:a3:7a:99:73:fa:03:dd:ea:
95:f2:1e:d3:21:77:61:9d:b0:60:b5:2d:4b:4f:9a:
7e:02:d9:1b:9e:1d:3a:a6:3e:27:7b:42:dc:27:f4:
46:2b:21:5f:11:4e:78:a7:ab:55:e0:f3:b4:de:78:
4b:cc:a7:02:2d:21:34:39:b2:29:98:1e:9d:37:e5:
a2:ee:eb:b1:4d:fe:fc:c9:f8:76:11:d9:8f:32:c0:
b7:34:c5:6c:01:ad:fe:11:07:3e:77:3b:cd:e7:81:
4d:ff:df:2a:26:1a:5c:b4:e9:eb:ed:47:f0:1b:6f:
15:e9:88:55:13:fa:0f:ab:5d:0b:98:db:80:30:30:
3d:ea:47:7f:11:83:b1:f4:bb:4a:ec:7a:41:9e:d4:
c8:55:26:70:97:75:5d:43:84:61:b5:d6:7e:14:6b:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C2:DE:DC:84:16:FB:3A:A1:A6:3A:12:F3:C6:2C:68:A0:3E:0A:82
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:30:e5:88:0d:ca:65:df:ff:62:8f:85:24:4e:ea:1e:c4:
8e:c1:51:09:ad:22:a0:d2:aa:0d:5c:18:39:0e:93:d6:c6:60:
47:23:b4:a1:95:26:75:91:f0:7d:6a:aa:ad:72:c1:dc:a4:51:
fe:70:27:3f:64:5c:f7:77:4c:04:e4:be:cb:49:b7:97:60:ad:
92:ec:a1:7d:7c:85:0d:86:2a:c7:50:c9:f7:6e:4f:d3:34:37:
e7:3f:13:d6:d2:3b:cd:ef:0c:29:12:77:84:93:8f:53:d6:cf:
9c:e9:61:7a:ba:30:f9:a3:58:8b:98:85:c2:53:51:55:c2:10:
1d:2e:34:40:b8:4e:a7:05:f6:1b:f7:29:89:bb:80:89:18:7c:
ed:32:9c:37:33:06:ba:77:98:74:01:6c:76:a3:b9:b9:58:9d:
90:02:b8:84:50:2f:df:52:60:87:a7:05:06:87:49:cf:1b:3f:
9a:7d:3c:45:7e:e0:c2:c1:b2:03:cd:3d:28:25:82:1d:74:ac:
84:a4:f1:4c:78:70:74:10:33:10:2f:21:a1:9b:80:0e:74:26:
12:95:10:71:d3:44:59:63:48:78:90:eb:94:bf:bb:2f:b2:a7:
70:e0:37:02:e9:71:66:3b:14:c9:3e:c0:90:2a:04:3b:9d:24:
91:15:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:12 2025 by rpki-client