Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: 8ykvran0KytMRE48BHymTo9CB04xRt18l95zn/JCqRs=
Subject key identifier: 71:53:EB:B1:EC:A8:82:5E:48:DE:27:FA:55:0E:A0:4A:D3:F7:97:21
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 01993124548B870948715BC18CBBA4C65E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 01:01:28 +0000
Manifest this update: Wed 10 Sep 2025 01:01:28 +0000
Manifest next update: Thu 11 Sep 2025 01:01:28 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: RqVDzFwqaUgnCZ4K77DWxFWlu06Ol8Rz60pFUC9/avo=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:54:8b:87:09:48:71:5b:c1:8c:bb:a4:c6:5e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Sep 10 01:01:28 2025 GMT
Not After : Sep 11 01:01:28 2025 GMT
Subject: CN=7153ebb1eca8825e48de27fa550ea04ad3f79721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:ad:e4:0e:7f:c0:75:90:89:db:af:2f:0c:
e3:d9:6a:cb:13:21:28:ad:97:97:98:99:ca:06:aa:
a8:fe:f6:0e:90:95:c8:d1:a3:2b:22:6f:3e:ae:7b:
71:bc:38:ec:31:46:9c:47:25:77:6f:8e:e6:8d:58:
2f:8b:d7:16:27:f1:55:6b:03:29:33:eb:4c:68:f1:
cc:b6:3a:8f:b8:f9:5b:ce:4f:d7:fd:a4:05:eb:69:
73:65:1e:da:17:78:88:a3:b8:7c:45:18:7e:43:db:
8b:3d:c1:4e:bc:d6:91:2c:92:7b:89:43:a2:d8:bd:
05:1b:12:7a:c6:3e:75:8e:fe:cf:02:24:65:f3:f7:
bd:78:f9:7c:28:37:00:2f:39:14:c5:d9:a6:05:95:
8f:e6:52:9f:d6:d9:03:04:1a:3b:47:3c:be:85:e9:
43:e6:ee:a0:89:ae:f9:ae:1c:f0:bd:bf:1d:a9:be:
0d:3c:cb:5c:b5:48:80:10:01:05:a9:23:59:a3:1f:
25:3b:6c:28:0d:b9:35:2c:65:c3:97:45:b6:f6:0f:
6d:43:5e:bc:80:77:f0:ab:f0:de:38:6d:dd:16:e4:
69:9a:e5:16:85:c9:5d:e3:ee:00:00:51:ec:d9:27:
2f:77:a9:1d:cc:aa:b7:ff:0a:ba:13:07:f3:b5:3e:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:EB:B1:EC:A8:82:5E:48:DE:27:FA:55:0E:A0:4A:D3:F7:97:21
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:55:fe:d1:d8:e8:84:0e:97:75:0a:91:d5:49:5d:58:51:c4:
9a:af:ac:35:ae:7e:34:4d:8c:a3:1b:c1:ec:da:bf:c5:5e:e4:
bb:9e:65:00:11:02:8c:3b:16:a9:0f:aa:9e:8f:56:11:4d:c4:
11:1b:1d:21:66:42:89:be:ba:d1:b9:c6:2a:2a:d5:4b:4c:38:
ba:c3:91:d8:61:74:78:71:59:aa:a6:fa:19:65:aa:56:f3:c6:
b7:75:f2:6d:cf:53:1a:24:57:b7:d9:19:ab:7a:ee:f2:17:f4:
5a:74:27:c3:64:3a:91:ba:75:e9:97:57:38:1b:f7:4b:94:68:
9d:38:b8:87:ea:8f:40:4f:09:0f:f8:74:07:f0:da:ca:7f:3f:
1d:fe:9b:8b:32:20:80:bd:34:77:fe:38:8c:d2:1b:68:69:6c:
ab:71:e8:55:8c:14:ac:35:90:d7:0d:d6:b7:0a:32:ab:99:50:
14:b3:16:a9:3d:f9:fc:6c:78:d0:1b:90:39:5f:e1:c6:2a:a7:
fa:7d:46:3c:ae:fb:41:06:94:b4:d5:3a:f7:f4:7c:d6:06:b2:
3f:a7:58:80:04:2f:b8:35:48:98:d9:e0:9f:92:76:5f:75:39:
06:bc:67:59:15:db:f6:98:f6:29:30:d1:ca:b1:4c:89:99:df:
b5:5e:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:49:17 2025 by rpki-client