Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File: jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier: vEH871dQbhuJDOkLlOGbjCACyNo5kHa1pigKHvCQ/H4=
Subject key identifier: 6C:95:3F:EB:C3:23:53:0C:42:DF:54:DF:AD:75:8F:20:27:5C:1F:AD
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial: 019922FA401299E93FE042CB93A04CC4A219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number: 12B6
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: 0Bn0AfSbHuBCqrP/FGXZAb/Z7fvJ5VXq2iIQ45M20AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:40:12:99:e9:3f:e0:42:cb:93:a0:4c:c4:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=6c953febc323530c42df54dfad758f20275c1fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:08:3c:a3:91:05:c8:db:85:46:91:38:a7:
fa:5d:6f:f9:29:7a:35:4d:2c:99:12:91:79:21:43:
01:82:5e:8f:29:ac:61:01:43:42:92:29:6c:85:2d:
f5:35:ab:e9:22:e5:5e:6d:c2:12:55:9b:71:d4:69:
80:4b:ac:28:83:ff:39:ca:40:b4:08:8a:d0:24:dc:
99:08:03:5b:03:e9:a9:cb:e5:51:83:b7:5e:f2:19:
ba:58:c8:d4:da:0d:31:84:76:6a:fb:0b:e6:9e:05:
2a:74:f4:86:ba:08:9c:84:f9:2b:84:09:36:ed:f8:
25:24:36:fb:56:54:b8:c0:ad:48:4b:74:f5:5f:fa:
30:7c:e9:ca:b1:70:5f:6a:da:5d:d7:ef:28:aa:e4:
a1:ec:0f:4c:bf:f5:51:e2:6d:d0:e3:a2:bb:a2:02:
30:7d:94:87:e3:44:07:b3:2b:29:b3:4f:96:dd:d3:
b4:e9:e0:54:3b:55:eb:3f:df:08:bf:5f:d8:ae:e3:
b9:08:96:7a:c1:73:9c:ad:af:a8:bd:94:29:22:1d:
08:fc:22:92:e6:60:e1:09:c8:fd:93:51:56:ec:35:
da:30:51:41:86:5c:2a:9c:e1:65:29:cd:f7:4c:d8:
de:2b:07:25:20:ef:3e:97:3a:94:1f:97:56:99:8c:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:3F:EB:C3:23:53:0C:42:DF:54:DF:AD:75:8F:20:27:5C:1F:AD
X509v3 Authority Key Identifier:
keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:41:3d:8d:25:23:03:c9:5b:91:75:04:20:5c:b4:83:af:
5c:86:2d:c4:a9:68:7b:5b:e0:de:56:d8:7e:fb:8f:88:84:f3:
97:f5:a9:f8:16:23:17:cc:5c:9c:29:8d:d6:1f:8e:1e:a1:9c:
9e:48:7f:c3:7e:8a:5c:ea:ff:95:98:34:7a:bd:01:7b:d7:85:
24:42:a3:b9:d6:10:d1:58:3d:5b:6e:bf:70:24:48:1d:6f:0a:
6a:97:64:b6:87:d3:d9:4b:c9:8a:e2:ba:50:8c:da:a2:cc:6a:
bd:bb:8f:34:60:51:4e:bc:2e:38:e2:75:84:67:8a:d1:e5:d4:
d1:9e:ae:c0:6c:12:33:f6:b7:8a:ec:5a:77:eb:30:b0:a6:af:
ac:f3:2c:0d:88:ec:c4:5f:ff:c3:f4:c3:f8:22:20:e3:11:2f:
72:40:f7:5b:c0:68:35:27:7f:1b:29:66:b6:3a:4d:00:9e:08:
e0:07:78:25:c1:51:fc:bf:66:68:5b:56:55:7e:9b:87:3b:79:
3b:4b:66:2f:5a:a6:a6:5f:aa:f8:57:90:f6:2e:6a:f8:ee:2d:
6f:16:81:4b:b7:6a:a5:e8:88:33:7a:8b:3d:05:9a:97:03:2b:
10:05:7a:ed:4c:b4:18:b0:15:76:05:aa:16:d8:cc:20:4e:6a:
95:0e:0e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:07 2025 by rpki-client