Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: lwNKyewyTE7kh/Rn1akaaAPEx85bb6qnfd2ormniaWQ=
Subject key identifier: 15:36:CF:7B:1F:31:F4:6D:59:48:7F:CB:BD:FB:62:35:8A:5B:9D:A9
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019921B054FAB8589BE34F474F780D2C9365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 01:00:28 +0000
Manifest this update: Sun 07 Sep 2025 01:00:28 +0000
Manifest next update: Mon 08 Sep 2025 01:00:28 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: c+prcmdILgdW6mK5MflSMQE8QMOTUzHLphA1zm7lEYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:54:fa:b8:58:9b:e3:4f:47:4f:78:0d:2c:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Sep 7 01:00:28 2025 GMT
Not After : Sep 8 01:00:28 2025 GMT
Subject: CN=1536cf7b1f31f46d59487fcbbdfb62358a5b9da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:13:1e:e3:b6:eb:97:f3:a1:db:52:84:92:
0f:c8:aa:74:6f:36:d6:36:fb:ac:8b:ed:d6:5e:a4:
d9:c1:41:8d:e4:fd:c9:bc:79:8f:5b:17:ae:c7:d6:
7a:5c:da:6f:95:67:42:67:81:3e:24:6c:00:3c:74:
ba:44:de:62:d1:a4:c2:9f:6d:d4:84:a4:b8:c1:70:
b2:11:d7:4f:24:26:d5:9b:43:b9:ff:57:e4:5f:e6:
69:d8:3e:fd:44:98:64:7e:4d:c0:95:1f:a8:d4:db:
44:54:2a:50:6d:02:9c:46:a4:9c:2f:66:ab:2f:90:
59:aa:47:0c:63:58:3a:97:9c:40:79:aa:e6:c8:69:
11:44:28:ad:a4:29:53:b1:60:3b:21:da:19:68:3d:
4f:ae:73:7c:0e:0a:a2:9a:0d:14:c3:b0:e7:d3:ed:
6e:05:a1:d0:d6:a2:52:6a:6e:d7:c3:3d:9b:34:9f:
22:a6:f1:1e:8f:87:fb:17:48:5d:f8:92:7e:62:92:
5b:4c:b8:9c:b4:6a:fe:0c:43:02:df:67:44:93:18:
74:1f:80:82:de:86:e1:9e:86:9e:32:9d:a8:00:a8:
68:90:fc:d9:09:b6:f9:1a:e8:04:9f:b8:8e:a0:b6:
15:b5:f9:45:6b:ab:ee:af:c1:09:46:e2:f2:bf:f0:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:CF:7B:1F:31:F4:6D:59:48:7F:CB:BD:FB:62:35:8A:5B:9D:A9
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:15:a4:15:e5:f1:81:43:f4:46:7c:55:c3:d8:9c:19:4d:cb:
f9:bf:c4:a3:c0:18:6e:f9:0a:71:93:d5:46:3e:45:34:bf:5a:
4c:49:86:e2:67:9d:55:59:9e:43:e1:59:72:7b:db:ba:21:2b:
32:2c:8e:38:40:02:6c:11:9a:4d:ed:98:43:22:85:b6:07:05:
72:1e:8d:60:00:f3:09:f0:87:a2:ea:3f:e3:a0:fc:6c:6d:15:
e5:c6:44:cc:8a:e1:74:e5:d4:35:0f:a8:76:c0:e1:a2:58:79:
05:5b:bd:a0:55:03:04:03:8a:80:da:d0:59:50:0e:7e:97:6c:
e4:4a:dc:b9:7d:03:b6:66:94:34:f8:67:3c:82:5f:ac:87:a7:
d6:14:0f:54:01:44:87:d3:4b:0c:08:a0:5c:c5:60:31:9c:89:
a8:a0:14:21:42:0c:55:ee:8f:2c:4a:6e:a4:96:b8:66:54:b0:
bd:ff:dc:56:bf:75:a8:f2:57:78:83:78:c4:8b:3e:8e:13:aa:
00:07:f5:7e:d0:4c:aa:3a:f0:e3:50:0e:9d:38:2b:f4:e2:78:
81:92:84:6a:0f:a4:53:09:2a:05:dc:54:7f:29:d3:9f:d2:ae:
25:31:30:6a:28:d1:52:b4:f0:27:f5:31:b5:a6:7e:63:f9:25:
56:74:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:47 2025 by rpki-client