Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: SK1ZPIKFnfNFxb3cnHmgcYs3oWb3nPlnxyIfhYcXvZg=
Subject key identifier: E2:38:BE:95:68:B0:79:C7:13:DA:F9:6A:52:CF:E8:43:94:D5:C8:22
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 019923D61C53D402CC8F130D4373FE26F89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:00:58 +0000
Manifest this update: Sun 07 Sep 2025 11:00:58 +0000
Manifest next update: Mon 08 Sep 2025 11:00:58 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: FLN2/BGsWwTPBIovMr7U2yPJmBdqNhcNN+EP8XwJrbQ=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:1c:53:d4:02:cc:8f:13:0d:43:73:fe:26:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Sep 7 11:00:58 2025 GMT
Not After : Sep 8 11:00:58 2025 GMT
Subject: CN=e238be9568b079c713daf96a52cfe84394d5c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:c7:aa:da:f4:10:07:e2:de:e0:ea:f8:e9:
fe:9b:ce:e9:75:20:e5:19:2f:3e:68:49:96:da:10:
2d:ca:92:c2:f2:e7:23:78:5f:b4:1e:b3:48:76:8d:
52:58:73:8e:06:fc:e2:c3:fa:b7:39:01:c3:95:2f:
50:f6:0f:5a:4d:a1:64:8b:1c:eb:13:f3:77:b3:f3:
f2:12:92:96:4e:14:b5:e8:ba:ae:dd:3e:45:c6:3d:
c2:e0:4d:f4:fc:0f:ee:b8:26:0d:0d:28:90:d9:d7:
08:f1:5c:f3:5e:c4:26:95:5b:40:59:27:a8:36:56:
9e:fa:4b:fe:e3:03:69:8c:76:e8:5f:bd:81:87:27:
7f:89:7d:64:e5:3c:89:e3:dc:05:62:a7:e6:0e:bf:
ae:f1:8e:70:62:04:61:c6:e1:c1:11:76:c7:26:1d:
da:36:43:53:a6:79:b3:21:73:92:a9:db:7e:a5:31:
7a:9b:07:c2:6f:58:40:62:bc:9d:ea:84:21:06:83:
95:fc:eb:c4:52:c0:96:be:48:fc:3b:40:2f:24:26:
0b:c9:32:66:3b:20:58:d6:f5:ad:d0:e8:7f:a5:48:
7c:00:79:8e:81:c4:9c:14:98:55:28:99:98:bc:48:
b4:b6:b7:53:fb:10:f1:af:ef:4a:91:be:d8:ea:fa:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:BE:95:68:B0:79:C7:13:DA:F9:6A:52:CF:E8:43:94:D5:C8:22
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:b1:aa:b1:95:db:4d:12:5b:df:76:d9:3c:d9:b1:b8:5f:
c3:b0:2a:c8:4d:d9:48:be:23:55:d6:28:cd:c5:50:46:ee:2e:
68:c0:76:a8:fe:fc:32:37:5e:7f:2d:a7:54:b4:0e:18:34:f3:
d3:57:56:ec:6d:67:f6:b3:22:69:e1:cc:ca:17:f9:8b:46:0b:
d6:1b:dc:5e:53:8a:9b:08:0e:94:1e:61:d6:2d:2b:14:41:4a:
5e:3a:85:2e:04:53:e0:33:79:d5:9c:5f:12:1f:08:48:86:fb:
a7:0f:72:a2:20:eb:ae:ff:ab:5b:68:40:73:ff:c6:45:2b:34:
94:dc:ef:b0:f3:ee:26:16:84:44:31:a7:c4:f4:92:ca:d5:86:
73:5d:bd:be:ce:85:c7:6c:07:16:1e:db:f4:47:29:93:d0:e2:
6d:4d:41:cd:8e:2c:ce:85:07:54:8c:06:68:15:3f:1d:73:41:
29:68:9c:d8:e3:df:a4:97:00:98:11:08:03:74:4a:4b:75:22:
6c:ab:50:af:d8:4c:96:ed:fb:d1:9d:0c:26:b3:ec:2f:2e:76:
26:bc:74:82:8f:d0:ba:5d:2d:24:6a:43:45:71:3d:a4:dd:16:
d0:19:64:d7:f8:64:25:ee:96:ee:69:a7:f3:c8:63:50:34:8a:
65:c3:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:51 2025 by rpki-client