Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: RlssN+ayTO9M7ljqloZsMTFHxMop4j9A3luDr9zloyo=
Subject key identifier: 26:93:BB:A3:A5:0C:55:49:88:7E:7F:7B:A2:DF:D6:11:7F:F2:CC:49
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 01992330E3C1D8A7B034D210D3D28BF06C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 121F
Signing time: Sun 07 Sep 2025 08:00:30 +0000
Manifest this update: Sun 07 Sep 2025 08:00:30 +0000
Manifest next update: Mon 08 Sep 2025 08:00:30 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 98J1xU2koyHSy7NCe1oeeJaCfT7c+H4j27hKx7mx1I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e3:c1:d8:a7:b0:34:d2:10:d3:d2:8b:f0:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Sep 7 08:00:30 2025 GMT
Not After : Sep 8 08:00:30 2025 GMT
Subject: CN=2693bba3a50c5549887e7f7ba2dfd6117ff2cc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:2d:00:57:90:d5:03:70:dc:18:24:ae:b4:
8a:04:33:b8:bb:c5:8d:fb:d4:d1:1c:83:6a:a0:e7:
5f:25:ac:7e:a5:6a:0c:0e:db:0b:24:df:ed:55:17:
49:4c:55:f1:5a:56:dc:37:7c:cd:5f:99:3d:f4:a7:
ff:33:63:01:50:e9:c8:45:50:75:34:e5:7e:0c:a0:
d8:ea:d7:40:f2:41:e6:47:a9:a9:18:36:b4:4a:d4:
12:d2:6a:39:d5:72:b0:86:c2:cf:4b:27:af:6d:ad:
d8:47:28:c0:8c:0b:65:09:62:99:29:ed:20:ec:2d:
21:2b:56:ee:f1:4d:3f:8d:6f:32:92:ca:e4:9d:d4:
55:6f:68:5e:86:0e:5b:56:74:bb:1b:84:9d:d1:3e:
58:f0:b3:8f:06:53:62:0c:01:6c:d0:b9:ac:e2:6c:
89:cc:24:ca:ef:e7:fd:4b:6b:b4:7e:e1:f9:0d:1e:
86:86:8b:48:d7:1c:1c:ab:ee:03:36:20:e1:96:53:
17:e6:26:43:42:db:e0:65:11:c0:ab:8b:f7:5b:ca:
0e:b3:41:38:97:5e:a4:dd:1b:ef:db:15:c7:95:2d:
6e:8f:fe:a8:3b:60:92:7d:6f:f5:37:10:9f:66:17:
e6:5b:aa:1e:6a:7f:17:82:a6:67:7c:be:59:50:fd:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:BB:A3:A5:0C:55:49:88:7E:7F:7B:A2:DF:D6:11:7F:F2:CC:49
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:77:5a:3b:7b:5d:9e:52:5d:f8:ab:3a:be:bf:01:1d:c6:71:
8e:c7:4d:8a:7f:81:18:a4:3b:06:59:11:26:4b:4a:ec:29:f2:
88:67:84:d9:37:5a:79:f4:ad:6c:be:94:c5:74:4b:12:f1:45:
51:d9:23:bd:68:d6:6b:b9:00:82:f2:26:48:b1:f7:c5:a1:3b:
6d:df:da:eb:df:43:c3:08:f7:45:83:dc:b0:c0:97:74:0f:4b:
ae:78:f6:81:84:5e:31:7b:2f:95:88:4d:30:24:7f:10:f7:29:
51:e8:16:44:e6:47:cd:29:a3:aa:50:5f:10:02:12:43:c2:9c:
be:a0:8f:8b:c8:55:14:9f:95:d2:50:50:7d:51:27:3e:8f:a8:
69:a1:88:97:25:89:e9:bb:7e:e7:7b:65:7f:74:73:6b:d6:cf:
42:8e:cb:b2:5f:50:47:10:d2:0f:b7:ed:c4:39:ed:bd:f4:a3:
3a:2f:cf:6f:f9:3c:12:79:52:14:96:e3:0b:da:64:e8:44:37:
b4:fd:cb:06:9f:d0:9c:b2:28:4a:5e:2b:d4:e1:41:e0:af:79:
81:37:da:d7:b6:9e:89:5c:be:4a:7a:4d:c0:4b:4e:26:5c:71:
89:1a:6d:8c:67:24:b3:52:ae:6d:fb:09:40:0f:fa:7b:c0:b8:
76:07:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:18 2025 by rpki-client