Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: BEX+yJfg2I42DzRycFpC6SuhssF/+gp+4iLeCe5ZrXw=
Subject key identifier: 1A:69:64:62:18:BC:C0:C4:45:DB:30:E7:90:3D:D1:99:9A:EA:0C:29
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 01992D46ACE66DEDD16B607AC1340E90278A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 07:00:29 +0000
Manifest this update: Tue 09 Sep 2025 07:00:29 +0000
Manifest next update: Wed 10 Sep 2025 07:00:29 +0000
Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: SoRGiP9Opfamo2emZxUcLaEmUiU5Lv4Vx9SY9Gsk5ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:ac:e6:6d:ed:d1:6b:60:7a:c1:34:0e:90:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Sep 9 07:00:29 2025 GMT
Not After : Sep 10 07:00:29 2025 GMT
Subject: CN=1a69646218bcc0c445db30e7903dd1999aea0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:7d:b7:5c:28:59:e2:61:c4:da:f0:d8:cc:
6b:8c:64:e3:07:fa:65:d7:b6:64:41:c9:79:8f:ee:
df:35:25:7c:da:00:38:c8:3c:e0:68:df:81:c0:8e:
6a:bd:e0:3e:55:e1:39:86:ec:dd:e1:45:aa:1e:64:
dc:f7:3c:fd:00:b2:9e:61:59:0b:f6:62:1c:f0:11:
23:de:c7:bb:02:b3:ca:22:19:bd:98:91:65:d0:22:
ab:aa:55:60:64:e9:81:94:26:0d:bc:47:e3:fa:e2:
96:7d:84:a1:91:58:56:cc:e7:87:b1:51:72:ed:38:
43:71:53:be:7a:1b:aa:dc:15:80:3c:23:a2:74:ea:
db:c2:ef:75:e9:cf:fe:a0:9b:25:f6:50:5f:d8:d1:
cd:eb:7a:25:99:8b:4b:d7:a7:f5:21:09:3e:73:b1:
97:25:82:c7:ba:cf:05:3a:07:2d:6a:ad:b4:ec:6d:
03:c9:87:a5:46:4f:1e:9d:16:12:69:c0:15:b9:bf:
2b:c6:88:b3:25:d2:22:cb:d3:e5:4d:7f:eb:81:ac:
f5:6d:15:a3:87:14:f4:f7:d8:7e:41:d5:53:c0:1a:
89:e4:11:b1:e7:5f:1e:6c:ab:99:42:4f:62:88:46:
94:5e:c5:52:7b:41:29:2a:6b:98:05:82:94:43:63:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:64:62:18:BC:C0:C4:45:DB:30:E7:90:3D:D1:99:9A:EA:0C:29
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:09:c8:c5:ae:ed:cf:14:66:f6:d7:5b:8c:35:a6:87:33:
59:c4:6e:d2:36:a5:d2:9f:11:dd:3d:c3:c5:a0:79:f6:92:80:
cd:ce:b9:5a:30:29:a8:b8:68:ac:76:ba:3a:b7:f3:1f:02:6f:
62:3f:ad:13:9d:57:bc:27:3e:77:71:ef:ea:5a:14:a2:d7:88:
7a:94:75:0f:47:ef:56:41:96:ca:4d:55:64:93:67:62:b6:e7:
7f:27:83:f0:d0:ec:b2:fe:8a:1e:fe:71:87:6b:57:a3:d8:c6:
68:8e:1d:a1:70:37:53:c2:85:44:c5:a4:65:38:a0:19:64:e3:
a1:75:28:ef:83:d6:4a:0b:52:f1:ea:4f:91:da:a9:47:28:25:
9f:11:92:2a:0b:3c:e8:b7:b3:e4:10:59:a2:e0:07:35:f6:c8:
8d:e4:fc:9a:a6:a8:a9:fe:83:41:4b:00:cb:36:d8:1e:cb:92:
02:15:f3:df:d3:41:34:0a:a8:3b:5f:92:86:13:5f:c9:80:ff:
82:ad:21:94:17:b4:f9:2b:2c:b6:6b:e8:44:31:30:22:e9:04:
33:5c:d8:05:5b:81:e8:46:7c:04:9a:65:9c:43:20:ed:ee:07:
f1:19:36:75:0d:77:49:92:39:12:f0:6c:42:7c:ec:0c:51:b7:
ee:9a:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:59:35 2025 by rpki-client