Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: oJbGq/mAI3trllv2TItwDluBZvQfsvoPmsBenKUBe44=
Subject key identifier: FE:E0:9E:39:EF:6E:C2:6E:1F:C2:46:1C:A0:ED:C9:AB:02:8A:7E:39
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 01993492818EAF1ABE7176C135C5F255FBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0F8A
Signing time: Wed 10 Sep 2025 17:00:40 +0000
Manifest this update: Wed 10 Sep 2025 17:00:40 +0000
Manifest next update: Thu 11 Sep 2025 17:00:40 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: lJNFoq1qRFGWSMMZ343QetLiLkkRBs6YMbHNW+PNUGk=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:81:8e:af:1a:be:71:76:c1:35:c5:f2:55:fb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Sep 10 17:00:40 2025 GMT
Not After : Sep 11 17:00:40 2025 GMT
Subject: CN=fee09e39ef6ec26e1fc2461ca0edc9ab028a7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:df:e3:72:44:62:2a:78:f7:48:0e:26:19:
77:0a:7d:71:6c:aa:b9:5e:05:a5:b6:c4:25:53:43:
9b:98:78:c8:34:d7:b5:ff:74:7f:ff:f3:12:21:6a:
52:e0:1e:83:ee:ae:82:a1:21:0e:32:1f:9e:4d:75:
a0:5c:7b:cc:25:1c:0a:a5:77:af:56:5c:f6:8f:e0:
94:f3:a2:c7:8f:db:cb:5d:09:e7:bb:98:99:c1:fb:
27:ab:3d:ac:11:8b:d2:ef:69:3a:70:fe:70:a3:26:
c0:9b:c1:8c:06:ae:92:02:d2:27:7e:4f:ed:57:cd:
d2:77:2b:ff:34:df:0c:d7:60:e0:6a:d1:56:50:96:
38:3d:ce:d8:8c:23:bd:a3:da:0d:6c:99:c5:82:fd:
4c:44:a0:21:56:5b:f2:4d:7b:6d:b6:0f:6a:23:d8:
dd:8a:2a:0d:b8:88:bb:f5:17:42:28:0c:87:90:ff:
f7:1a:f6:71:38:3d:7f:fb:2f:5e:84:10:28:35:08:
ed:1b:1c:90:0f:0a:cd:b6:55:6b:89:6e:e8:65:ab:
e4:64:47:bb:6e:53:72:df:96:20:ad:48:1c:10:50:
e0:11:db:9b:a7:1a:98:37:59:0d:c3:61:33:b9:a7:
c2:5f:96:33:9f:7c:f3:b4:14:2a:60:9f:4f:17:6e:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:9E:39:EF:6E:C2:6E:1F:C2:46:1C:A0:ED:C9:AB:02:8A:7E:39
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0e:b5:29:ef:3b:41:d3:d0:46:ae:13:80:1d:6a:13:8c:e8:
79:c6:ad:3f:97:1c:87:6a:7e:cb:2d:21:47:1e:a5:09:cb:59:
87:27:97:63:29:ca:4a:f2:6a:b1:cc:a1:bf:4c:10:66:2d:fb:
1e:49:00:31:a3:8d:c1:bf:52:37:0a:56:62:55:cf:fb:3b:0c:
84:b2:ad:41:be:5d:f7:de:45:71:d1:71:9a:8a:97:a8:1a:67:
95:fd:47:7c:76:24:b8:2c:69:9b:8a:43:d9:c0:6e:3a:de:a4:
e0:2e:c6:c2:d4:19:d8:81:b1:f3:56:ba:ec:b7:ed:68:0b:7a:
25:fb:75:23:30:6f:4c:84:24:c8:83:df:f0:fd:70:ce:78:50:
f6:a5:38:08:7b:28:11:50:ce:f9:90:72:5e:68:4b:18:8a:79:
93:cc:28:0c:d6:5e:3b:59:12:ae:2a:7a:86:9f:4f:0a:96:ae:
51:c6:d7:2a:5b:d3:e1:8a:c4:49:f4:86:16:dc:3f:88:84:d0:
8b:2b:c5:9d:d0:a2:db:8c:04:5f:ff:99:fd:f1:df:e9:ae:f0:
74:a0:d5:77:9d:47:cf:0d:55:03:1d:1c:79:eb:d1:24:d5:b6:
91:99:cf:17:8a:e8:3c:79:e7:9c:ef:3d:7c:d7:da:4d:52:ee:
46:4b:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:06:49 2025 by rpki-client