Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier: dXbwLUN/z/HeHVl/Nvo2+l+gKFYg3rkzzqneNtOwDBw=
Subject key identifier: 9F:F8:E1:7C:0F:41:62:8B:BC:BC:9C:2C:4C:9A:E0:F2:2B:B5:0D:A9
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer: /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial: 0199225597C24856FE43F84AAE4559215DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number: 04D3
Signing time: Sun 07 Sep 2025 04:00:58 +0000
Manifest this update: Sun 07 Sep 2025 04:00:58 +0000
Manifest next update: Mon 08 Sep 2025 04:00:58 +0000
Files and hashes: 1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: gIHjNGJtrxocRZZvtNqgqSA1+xYO0W6EBO7WLXfD6R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:97:c2:48:56:fe:43:f8:4a:ae:45:59:21:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Validity
Not Before: Sep 7 04:00:58 2025 GMT
Not After : Sep 8 04:00:58 2025 GMT
Subject: CN=9ff8e17c0f41628bbcbc9c2c4c9ae0f22bb50da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:d4:0b:64:78:67:06:71:ea:5e:0e:6e:5e:
2a:9f:28:20:f2:6d:cd:99:15:b0:1d:5f:11:40:b8:
77:a8:24:8c:34:c7:7e:19:ff:7a:70:af:39:73:19:
f9:f4:f8:41:c3:ad:08:49:7e:cc:53:ec:d7:0c:68:
de:14:58:bb:8f:18:de:3f:df:61:b8:5e:c0:40:96:
52:c2:e5:f2:1c:f0:ad:ba:08:a8:ab:0d:47:6a:0e:
26:16:6c:d8:a4:d7:0d:0a:1b:a2:fb:78:ae:ef:2c:
1e:01:32:df:bd:2f:b7:86:f1:c2:4b:d0:84:22:35:
64:a3:1c:32:14:03:2f:da:81:92:d4:96:42:83:63:
2c:46:1b:ae:60:eb:a2:b7:92:40:8a:55:98:5c:c5:
ef:04:be:b7:d6:a7:e0:11:5d:39:12:f2:06:a5:6d:
0c:9c:e0:71:1b:95:ea:90:58:14:36:5b:5b:b9:5b:
27:a2:f6:63:a2:74:4b:1a:73:94:cf:ee:d1:7f:bf:
0a:8b:2d:b2:6f:f9:43:80:38:c3:3d:2b:2c:44:8c:
23:89:97:14:15:df:3a:cb:4b:bb:37:91:69:2f:08:
25:0e:06:7f:6c:de:97:80:f0:16:c0:b5:f6:33:98:
38:42:c1:cf:c0:26:f6:f5:26:6a:99:fe:71:fb:9b:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:E1:7C:0F:41:62:8B:BC:BC:9C:2C:4C:9A:E0:F2:2B:B5:0D:A9
X509v3 Authority Key Identifier:
keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:51:29:cc:14:23:da:87:36:62:ac:41:ad:43:4e:11:e8:
16:a9:71:4e:a0:b0:fb:1f:40:de:c7:c4:ac:89:71:79:e1:98:
27:4c:44:9b:b7:a1:12:af:1c:ef:a4:e6:2f:22:d7:ca:46:68:
62:ef:6a:4d:f2:a3:39:45:a0:e9:88:0e:7d:7c:60:3a:62:8d:
21:5b:a4:49:f1:14:38:55:d1:bb:ef:b1:e6:d4:7e:f8:bf:bf:
e5:90:5e:7c:af:7a:9c:38:dd:9e:8b:7c:69:5c:c6:d4:8e:39:
92:02:25:46:4b:8d:aa:23:bf:c1:5f:97:33:3e:a4:ef:ba:03:
2c:d7:94:73:72:62:cc:2f:5f:56:af:05:75:ea:23:e0:1d:9f:
b4:cc:58:4f:a1:93:69:87:4a:f3:df:cf:fd:4a:46:bc:77:0f:
d7:b2:f6:94:9e:c4:f6:31:58:91:8f:38:70:8b:6e:c6:68:1a:
ed:be:69:47:96:be:cc:58:66:c5:2f:4d:71:ee:5c:6c:62:64:
b0:3f:73:6c:6b:09:45:ac:b3:0c:3c:7d:95:30:c2:0a:f1:96:
5b:56:da:2d:db:89:b8:23:18:8a:a0:b5:01:9a:d3:2a:d5:23:
4f:20:39:ea:78:19:5c:83:ec:99:06:ad:be:58:2e:ec:4a:52:
3f:01:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:15 2025 by rpki-client