Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier: VG0Er5bccW/4qwtacIsWNgZQ+Q9g6Xnj7ETugIO6Po4=
Subject key identifier: 43:9E:C2:AA:E4:E0:E0:FD:1A:98:F5:06:78:B5:3D:99:0B:31:09:26
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 0199349240E946E4FB1588032900815356AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 17:00:23 +0000
Manifest this update: Wed 10 Sep 2025 17:00:23 +0000
Manifest next update: Thu 11 Sep 2025 17:00:23 +0000
Files and hashes: 1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: E5b4c4CYjAvKikEG5TKFOb/4orss9IqaY6+Pxy+oZM4=)
2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:40:e9:46:e4:fb:15:88:03:29:00:81:53:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Sep 10 17:00:23 2025 GMT
Not After : Sep 11 17:00:23 2025 GMT
Subject: CN=439ec2aae4e0e0fd1a98f50678b53d990b310926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:5c:9a:1e:37:18:64:71:28:a5:67:06:24:
5b:c2:4a:9e:1d:13:64:4c:0f:a6:ff:ab:fb:f4:f8:
fb:af:66:78:11:17:32:cd:80:96:f6:15:a5:0d:1d:
29:b2:f9:86:de:74:25:a4:fa:8a:8d:c6:32:80:32:
60:d5:14:2a:5d:05:31:21:18:dc:f8:bf:fc:2e:1f:
1b:d5:60:29:82:35:8e:27:db:36:98:ab:9e:e0:54:
29:ba:6e:cb:68:0f:40:38:6f:ab:60:74:c2:81:4a:
42:14:d2:85:bd:7f:e3:15:5a:a0:5b:a2:d0:f9:e8:
61:08:90:c8:b2:64:98:ef:34:41:b5:30:9a:bf:3a:
20:c0:39:f3:68:49:36:f6:a3:c1:c4:06:b5:59:74:
26:5e:6a:88:a7:36:32:eb:27:97:84:ed:ae:51:88:
b1:78:78:5e:2d:a9:67:24:fa:7e:eb:04:12:37:5e:
86:93:6a:6c:f9:27:5f:ea:c4:0a:e7:0a:a4:6d:c4:
b8:2e:f5:7c:ef:9c:6a:e0:65:e3:a9:eb:e2:4a:f8:
c9:2b:91:45:c9:9f:40:6d:ca:21:01:ae:e6:04:56:
38:97:36:78:7e:5b:6a:ad:58:0d:51:fd:32:66:8d:
0d:ad:3e:d4:55:a8:64:c1:03:9a:b1:9a:01:9f:5c:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:C2:AA:E4:E0:E0:FD:1A:98:F5:06:78:B5:3D:99:0B:31:09:26
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:3c:d5:3d:1a:57:38:52:6e:bf:ac:39:5b:25:45:00:c9:
df:76:ac:63:39:67:9b:2b:89:e9:68:6c:d3:a0:cb:79:69:f9:
da:f4:78:8a:01:a2:d4:87:e9:81:72:40:57:e8:1d:35:52:10:
f6:82:35:ac:b6:1c:20:b1:7c:56:74:b9:f5:98:8b:98:1f:4f:
70:ab:f2:a9:0c:0b:63:b9:27:ce:ee:23:69:58:aa:65:1c:e2:
69:69:85:27:d4:77:22:ee:3c:48:99:f6:2b:2a:8a:f1:58:1b:
58:47:76:51:e9:45:89:59:23:ec:a2:af:dc:1b:59:d7:24:49:
f9:eb:ef:0a:08:02:d8:4e:05:9b:7f:a5:89:03:b6:91:e4:5e:
67:56:d6:49:45:e3:8a:ce:96:1d:29:5d:33:eb:ed:73:cf:8b:
ef:c2:05:98:24:87:45:5a:cb:11:85:9c:66:64:81:09:35:f2:
b9:78:6c:92:a1:ba:73:48:a6:81:52:8a:30:d0:d1:e4:d3:19:
a7:6f:33:1c:71:8b:d5:75:18:45:6e:92:22:f4:bb:5f:6d:c1:
54:39:15:77:cf:f9:c1:3b:c0:da:11:3e:fb:91:99:a7:73:c5:
32:4d:6f:2a:b9:55:61:d7:14:6b:d1:16:52:16:a3:e6:5b:18:
53:1e:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:49:36 2025 by rpki-client