Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: YF62VY+NAevHf0ghjRophaG6IY3rmT97NL11k4m/ST0=
Subject key identifier: D3:EE:85:7A:C7:4E:24:01:1A:C8:2F:A2:FB:B7:E6:FB:CD:1C:CD:E9
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019923D65227351B20F95DEF35113044884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 05E5
Signing time: Sun 07 Sep 2025 11:01:12 +0000
Manifest this update: Sun 07 Sep 2025 11:01:12 +0000
Manifest next update: Mon 08 Sep 2025 11:01:12 +0000
Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: xmB+aynda5VVkFXacezxFvtfaU0KJ+tSPlhwD+RD6sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:52:27:35:1b:20:f9:5d:ef:35:11:30:44:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Sep 7 11:01:12 2025 GMT
Not After : Sep 8 11:01:12 2025 GMT
Subject: CN=d3ee857ac74e24011ac82fa2fbb7e6fbcd1ccde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:3b:7b:e7:b2:25:f2:a3:f2:04:85:85:23:
95:c7:d3:44:35:36:4d:32:e5:dc:f8:22:b1:0a:77:
32:21:58:e3:64:90:52:d8:be:fc:5d:96:0c:0e:ef:
23:89:db:ed:f8:ac:bc:44:e7:e7:25:92:d4:ee:96:
2d:26:62:85:de:48:b1:fc:59:95:8a:39:9f:62:09:
f4:ae:2c:e3:11:8a:11:ba:68:cf:d0:61:e9:37:33:
71:8d:85:dc:76:f6:65:72:8f:9d:49:ac:56:68:8a:
96:57:f9:c8:b3:6f:4a:7d:6d:10:1f:e0:03:a0:2d:
86:5a:ce:5d:11:c8:74:84:63:1f:77:bf:b9:56:15:
04:51:ae:cc:af:5d:9b:7f:85:b0:69:d8:e2:69:81:
ee:c8:8c:f6:bb:7d:45:c3:33:af:6f:19:78:f0:eb:
aa:c4:5d:15:e0:52:e4:10:fb:54:f5:3e:75:41:57:
7c:b3:ea:76:db:1f:aa:8b:db:96:d0:29:b1:41:21:
43:0d:30:83:af:9b:24:2c:22:57:ce:e1:6e:38:ab:
9f:2f:3b:3b:ad:17:9c:18:07:90:58:5e:79:8c:32:
a8:bc:cf:6d:eb:e5:33:03:0c:7b:74:8c:57:c5:64:
ee:34:73:76:53:10:be:5b:97:96:0d:1c:ab:be:f0:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EE:85:7A:C7:4E:24:01:1A:C8:2F:A2:FB:B7:E6:FB:CD:1C:CD:E9
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ac:62:7a:33:4d:6f:45:ce:db:11:c9:90:77:cd:f3:d0:fd:
ba:3a:ed:fd:91:b6:01:bc:75:24:2a:54:56:ca:d9:f7:13:c7:
2b:bc:32:32:ab:07:79:be:7e:09:82:5e:9f:28:32:61:bd:d7:
c7:d1:d8:57:22:46:a7:5b:57:83:55:e0:a4:b4:51:49:70:37:
31:34:bc:d6:d2:cd:2a:f3:2c:48:c6:ce:55:2d:5f:b5:6d:37:
f9:ac:a6:a2:0a:25:75:95:2b:c3:19:1b:c4:24:38:25:ff:7e:
54:d4:72:fe:0a:bc:a1:70:d7:e7:89:d5:1d:af:0a:bf:48:58:
7a:f2:08:0b:84:71:c2:6f:64:d2:e5:d1:b7:1b:da:5f:2a:30:
79:bf:35:42:b7:a0:d7:97:ab:b7:dd:c5:f0:72:34:b5:60:3a:
d3:0e:5a:66:40:a4:b8:57:a3:df:c1:3f:ef:cd:1c:95:4d:ff:
d7:3e:90:79:1e:b5:10:92:90:04:fb:32:44:4c:4c:c7:e7:94:
2c:7c:91:12:86:7d:62:02:bf:d6:f7:15:4a:cc:76:e6:80:15:
7d:6d:de:2a:c3:4e:d4:51:ed:d3:d4:86:55:76:67:cd:a8:aa:
cd:3e:10:50:f5:88:c8:0a:8d:c9:02:37:fe:95:7e:92:7b:2c:
e3:ad:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:50 2025 by rpki-client