Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File: Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier: E8Lrh/qdXNhT1uxcJ8/XkjxKHw/hPxChJS4+Rg17Bc8=
Subject key identifier: C7:EC:C0:E6:6E:3B:BE:00:F0:91:07:1B:39:AD:09:0D:06:B3:BE:A7
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 01992DEBF31C48D39B6533CB2297722067AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number: 11A6
Signing time: Tue 09 Sep 2025 10:01:01 +0000
Manifest this update: Tue 09 Sep 2025 10:01:01 +0000
Manifest next update: Wed 10 Sep 2025 10:01:01 +0000
Files and hashes: 1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: PBX1Oio6mhQzTXnemagbpyD59CxkTh3P5qYEr/Pkuks=)
2: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (hash: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=)
3: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
4: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
5: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:f3:1c:48:d3:9b:65:33:cb:22:97:72:20:67:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Sep 9 10:01:01 2025 GMT
Not After : Sep 10 10:01:01 2025 GMT
Subject: CN=c7ecc0e66e3bbe00f091071b39ad090d06b3bea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:8e:a6:84:64:da:31:9e:84:f7:de:84:20:
0e:33:98:76:41:db:ca:9e:13:1b:de:9a:d2:05:5f:
e3:80:23:58:78:cf:95:1c:2e:1f:22:4a:38:13:0d:
a3:e7:a5:0c:3f:6d:9d:5d:4d:9e:00:8a:07:32:79:
e3:1c:d3:db:78:90:f3:4f:44:1c:ef:3f:e0:0d:27:
9f:f0:4e:7a:f9:e7:45:82:b4:2b:b9:77:2a:52:14:
66:a5:dc:d9:ee:78:92:8a:5b:85:6f:37:74:cc:05:
2c:b9:d5:8c:ba:76:f6:63:bf:90:ae:f6:0c:e3:00:
7a:c9:00:54:25:9c:6c:a0:a3:7d:36:8a:16:7b:ec:
e7:83:d6:d0:f3:d4:dd:5a:d0:26:a4:ce:be:37:98:
c9:12:f5:79:bf:61:cd:e1:0c:44:b1:e8:77:3a:31:
8e:2d:e9:7a:1d:a5:5d:34:61:01:b0:40:92:ef:74:
b9:12:07:30:5e:af:04:9d:f4:14:e2:1f:91:be:73:
77:e2:95:6d:73:b3:5f:49:49:97:20:cc:bd:bd:6a:
12:7d:5e:b3:a9:e3:6e:fd:ce:11:33:8c:a2:0d:f7:
08:ed:de:56:e2:d0:22:0f:0d:56:2f:b9:5e:b8:73:
d3:7c:8b:0d:2d:fc:38:29:ca:f7:aa:9b:c2:60:40:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:C0:E6:6E:3B:BE:00:F0:91:07:1B:39:AD:09:0D:06:B3:BE:A7
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:2c:b2:ad:3b:b9:33:c6:b7:31:a4:e1:6a:67:d6:ee:33:
21:3d:64:96:85:eb:c0:3b:f0:ca:8c:64:54:53:c2:5f:2e:6b:
8a:0c:08:2f:67:39:d2:d5:b6:a1:a5:07:f2:6d:c3:2a:85:e6:
3b:cc:f0:95:42:62:b5:ca:bc:d1:8d:5b:6b:26:ae:ea:2c:4b:
c0:1c:99:78:8b:05:1d:35:29:35:b6:0e:cc:6e:8d:e5:a4:05:
25:08:1a:52:87:ae:05:91:a5:a7:40:16:30:ee:db:a9:3c:7d:
19:e9:b0:be:54:61:0a:6f:d7:f4:83:6c:8a:27:03:eb:ad:09:
c4:5a:61:e8:7d:43:58:2e:53:09:ba:9b:76:70:cc:fb:37:0d:
9a:f0:09:33:a9:e0:bc:a6:55:ee:ff:1e:cb:1e:52:0d:0a:1d:
e5:42:3e:86:4e:32:ff:ad:54:43:75:0d:c8:48:3e:92:a0:5d:
f7:5b:43:50:57:95:f5:9e:79:e6:4e:89:a4:e0:d7:aa:d2:c4:
36:ea:d7:d7:86:46:a2:03:35:32:3a:f2:3b:0e:f3:8a:47:8d:
30:aa:4a:ce:21:a3:cc:7b:b3:68:06:b8:ea:de:62:09:ca:b2:
61:ae:1b:6c:64:40:75:a5:76:d9:f0:9b:07:97:a7:a5:47:41:
de:4c:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:50:03 2025 by rpki-client