Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: BtM2Hz7qROW44T5JYQlxvmZ8xJKbnK25Nw4dlwS/wUc=
Subject key identifier: CA:5C:09:06:AA:52:31:FD:51:15:EE:41:60:CA:66:A7:8F:A7:96:7F
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 0199507816129FD5C6CAC19924AAA27DE59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 168A
Signing time: Tue 16 Sep 2025 03:01:11 +0000
Manifest this update: Tue 16 Sep 2025 03:01:11 +0000
Manifest next update: Wed 17 Sep 2025 03:01:11 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: TT1/MqCXbKE9cqVbRIdP5lI9HN4a4KAOI/OSMi+FxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:78:16:12:9f:d5:c6:ca:c1:99:24:aa:a2:7d:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Sep 16 03:01:11 2025 GMT
Not After : Sep 17 03:01:11 2025 GMT
Subject: CN=ca5c0906aa5231fd5115ee4160ca66a78fa7967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:81:05:b6:4a:04:f1:bc:e5:8a:55:93:b2:
3f:6b:a8:91:0c:ff:07:f1:5c:17:70:43:18:ea:a8:
2b:01:b6:8f:d9:26:a0:ee:2a:00:31:ab:ba:80:63:
9c:b7:8c:76:4d:ed:50:25:8c:08:b6:c0:cf:c9:d9:
97:2f:10:94:e3:53:37:bb:d6:b9:1f:f1:7e:24:01:
c8:92:37:e0:fa:02:4e:79:6d:24:6d:33:bc:cf:83:
b2:5d:9a:73:9b:c3:f8:ac:4f:c9:e5:f0:f6:70:07:
9b:77:fe:cf:1a:e6:f9:67:7f:42:87:9a:21:b6:b2:
51:1e:3c:2d:82:e1:19:b4:cb:58:a1:a9:35:0b:28:
60:00:a6:5c:37:24:9a:5e:73:cf:a0:be:5e:40:a4:
90:f9:20:99:df:19:13:55:f8:79:e9:67:a0:51:52:
04:97:21:93:7f:42:d8:a7:16:ed:d3:43:db:4b:e3:
3e:75:7e:3d:bc:4e:7c:39:ed:fe:24:01:29:27:f0:
e7:d7:56:0f:1d:22:ae:8d:25:5e:ee:1e:86:fc:39:
9f:a6:3b:ef:2c:45:f7:ee:c4:c1:2f:b8:20:86:c5:
83:73:92:eb:39:97:a4:a1:3f:9e:1f:51:d6:b4:c0:
56:ca:f8:3d:5c:47:3e:6e:37:b8:f1:11:f4:29:35:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:09:06:AA:52:31:FD:51:15:EE:41:60:CA:66:A7:8F:A7:96:7F
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:45:75:97:62:d4:f0:0e:46:0a:c4:3c:c2:a5:14:32:e6:91:
b0:e3:55:30:93:ef:44:49:b7:86:33:69:fb:d8:ad:4c:63:38:
51:cc:39:9f:39:71:6b:24:7e:04:13:27:62:10:9b:35:e4:8a:
3c:ef:84:56:55:71:ad:11:cb:2f:6f:0b:f1:c3:eb:7f:72:22:
03:c1:89:8d:71:b4:b2:d9:59:fd:fd:de:fb:2d:3a:23:df:9c:
86:7c:3f:d2:88:9d:bf:73:ac:26:93:4a:1d:a7:cc:f9:b0:d3:
09:4d:9d:cb:3a:4f:b9:7c:d9:e0:f5:41:ae:14:28:e4:97:0f:
20:d5:c9:d6:45:2f:37:59:b7:cf:c9:86:c1:c7:1a:79:48:1e:
69:b4:a7:d7:1d:46:cc:84:f9:13:f7:92:b9:50:aa:b8:bc:dd:
10:84:54:3d:7d:93:12:b1:0b:50:02:a6:3a:6a:37:d0:4c:21:
01:4b:b9:71:6e:98:cd:59:52:02:10:b8:48:a7:8c:af:63:ed:
7c:d1:6c:c0:25:25:c1:3e:c5:cd:47:4a:34:5f:09:4f:90:8a:
a1:d1:c9:80:76:4d:bc:a3:5e:e7:ce:d4:7d:78:5b:16:94:bf:
27:fa:8d:91:75:40:11:9f:1a:58:dc:26:98:1a:03:f1:6e:fa:
65:ed:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:00:06 2025 by rpki-client