Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: 7Ck0bh/HC2BvVBuhKwqxf4aKEwxns5NgWufzLasIOcI=
Subject key identifier: 70:31:0A:35:83:E8:07:BD:C2:5D:BD:03:5F:3F:B1:66:21:06:4F:F4
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 01993BDDF2F1E89C1979C4C95D44CFAB0288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0B5A
Signing time: Fri 12 Sep 2025 03:00:25 +0000
Manifest this update: Fri 12 Sep 2025 03:00:25 +0000
Manifest next update: Sat 13 Sep 2025 03:00:25 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: +gV37MsdCBJSK6h/gtHC6mFt2cmQnV22vnzsMBVA4p4=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:dd:f2:f1:e8:9c:19:79:c4:c9:5d:44:cf:ab:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Sep 12 03:00:25 2025 GMT
Not After : Sep 13 03:00:25 2025 GMT
Subject: CN=70310a3583e807bdc25dbd035f3fb16621064ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:16:cd:64:59:da:61:ea:c2:54:38:d9:95:
55:5c:12:b1:5a:f1:48:f9:f2:ba:61:91:19:5b:54:
0a:0b:7c:56:22:fc:99:cf:9a:b9:3b:02:5f:c3:f4:
6e:4b:fa:fd:e5:c5:8a:6f:15:d5:f2:14:8d:e7:8f:
49:a8:e5:d5:66:1d:ef:be:87:e0:85:bd:41:52:d5:
3b:08:a3:7e:e4:31:24:18:c7:31:74:5c:e3:74:60:
a2:17:7c:f6:77:bf:e4:3f:ba:3c:69:e4:64:0b:45:
15:7c:22:ef:c3:75:a6:7f:24:49:c6:ad:52:dd:e9:
6a:2f:56:c4:6f:49:66:84:52:53:c8:bd:e6:29:6d:
b5:c2:bf:23:a7:3f:71:9a:29:7d:cc:24:55:1e:15:
0d:f6:2c:72:97:51:e3:04:90:fd:2f:55:9f:6a:15:
4f:fc:a5:02:25:5d:ca:c9:50:2a:15:49:4b:5b:47:
af:f7:ea:45:60:4e:ac:90:5b:e3:9c:03:aa:1e:7d:
32:d7:10:a0:7c:7c:2e:c6:a3:bc:82:c5:07:ea:d0:
bb:3d:b5:b6:02:2e:3c:5e:7f:60:22:39:64:50:15:
4a:26:3b:11:15:21:9a:2a:73:5f:92:ea:df:64:bc:
0f:ed:6b:aa:1c:36:c1:94:f9:8b:16:59:b7:e6:cd:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:0A:35:83:E8:07:BD:C2:5D:BD:03:5F:3F:B1:66:21:06:4F:F4
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2e:9b:98:81:6c:cb:c1:d9:f3:ab:bc:bc:a8:41:04:74:2b:
80:7d:bf:c8:df:f9:cf:04:50:d2:f1:c8:81:29:68:54:1e:0f:
95:23:2f:3e:b1:fc:f2:21:c5:c7:de:c1:1b:46:f4:b3:96:ce:
dc:45:68:d0:69:98:80:49:57:6e:1c:f6:71:47:92:3d:59:24:
a1:c2:01:4c:7e:e2:13:88:fc:c6:3f:04:ec:4b:ff:06:66:90:
11:12:3d:af:93:33:43:cb:bf:c4:bc:ad:38:3e:33:9a:5e:37:
95:10:30:40:a0:13:1b:9b:a4:d9:57:a9:c3:33:6c:0d:59:9e:
1d:1a:c9:ad:c6:b5:99:68:94:cb:e9:f4:12:66:ee:71:97:1d:
e9:fa:03:42:e2:81:02:b6:ae:af:7f:2e:45:ad:c4:12:22:76:
9e:5c:ed:1a:6a:5b:18:ec:4a:d6:ad:dd:6c:08:9a:65:c9:4d:
27:66:57:57:ac:97:da:2d:8a:3a:d2:8b:59:38:80:4e:9e:31:
b0:52:83:fb:0d:86:85:98:f8:78:ce:20:f6:1d:d2:42:ab:e9:
76:92:ff:b6:92:8a:a5:37:da:4e:05:28:e7:40:72:a3:8b:95:
53:dd:7c:a1:99:62:12:f0:bc:64:96:7c:71:51:27:26:a2:42:
e5:74:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 11:52:23 2025 by rpki-client