Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: fbEzoxF6x8Ep60yXKTNuI1ea+NQ1Skb0kYBQ2oZjacg=
Subject key identifier: 89:FA:6F:86:49:AD:FC:32:B4:FB:8E:7E:7A:CA:51:FC:C5:54:62:10
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019936EF104690E0D8EC6F1B4BFA7D62AC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 054A
Signing time: Thu 11 Sep 2025 04:01:00 +0000
Manifest this update: Thu 11 Sep 2025 04:01:00 +0000
Manifest next update: Fri 12 Sep 2025 04:01:00 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: uIfhkE2nEY3A6O9wJndr9KBY9+bpiIOaLdWrKGfeLtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:10:46:90:e0:d8:ec:6f:1b:4b:fa:7d:62:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Sep 11 04:01:00 2025 GMT
Not After : Sep 12 04:01:00 2025 GMT
Subject: CN=89fa6f8649adfc32b4fb8e7e7aca51fcc5546210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:9d:0c:6e:a7:2c:bf:c6:b3:67:7a:76:2c:
67:04:6a:27:f1:5f:71:9d:f2:9a:d8:18:93:73:be:
5c:84:c5:46:ed:ff:a5:bf:10:cf:33:0a:12:30:58:
11:7e:a0:74:9c:e6:86:8f:19:1d:c2:f1:0d:7f:03:
a0:2a:41:8a:29:9e:f2:85:c3:83:2f:4e:5f:0f:11:
07:e1:6e:06:66:0e:5d:9a:c5:ac:66:74:15:c1:5f:
06:48:de:a1:69:8c:60:b4:83:02:e8:57:b4:39:df:
7a:b3:16:ac:fc:21:4f:44:c3:29:0e:0e:79:4b:3c:
d1:ef:80:1a:23:9b:cd:ac:27:8b:3f:e9:cf:c8:9b:
76:e8:1b:09:77:f7:2f:9f:3e:20:1b:2f:09:86:2e:
fb:06:31:10:cb:07:a8:d2:35:e3:1f:d2:0c:83:8c:
e9:38:c0:80:cd:b9:1d:05:9f:3a:a4:09:f6:53:39:
1d:86:1d:70:01:96:d7:88:99:41:e3:06:3f:a6:f9:
33:61:43:7a:67:59:49:2e:3c:3b:b3:9c:9b:09:6e:
bc:77:ff:ad:1c:a3:e0:41:52:b5:03:f3:c9:8a:e5:
c9:b0:8d:05:5d:b0:25:32:7e:47:82:e3:b8:4f:b9:
85:9c:42:05:c1:9a:4f:a9:b0:65:53:c1:49:9c:24:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:6F:86:49:AD:FC:32:B4:FB:8E:7E:7A:CA:51:FC:C5:54:62:10
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:8a:5e:dd:3f:b3:42:d5:fb:2b:39:a8:43:b7:d6:7b:2b:
78:0b:26:44:24:50:42:a8:57:59:a6:e2:f7:3b:3f:b4:bb:dc:
3a:f1:6f:b0:13:af:6b:82:8c:ce:44:51:65:1d:08:d1:4c:fa:
41:5d:3e:b7:ab:e7:b6:a5:c9:b4:88:83:fe:64:45:79:33:e0:
48:01:ef:b4:7b:a6:1f:78:55:3d:57:85:f1:0b:47:81:d7:d4:
00:d7:15:a0:82:ff:c2:07:ec:bb:f8:54:ec:2a:63:05:6d:53:
2d:d2:fa:61:d6:c1:a1:5a:56:28:79:9f:5c:a2:13:3d:6e:69:
64:81:15:ba:89:ff:25:34:2d:5d:e8:ef:be:1f:be:5a:45:5b:
2f:1c:2e:2b:14:c8:b8:93:0f:ce:6a:ac:68:ca:62:7e:c5:8e:
e5:32:cc:26:46:24:72:13:c2:38:73:bc:26:d9:d3:3b:33:70:
51:b4:3f:83:47:4d:b8:a9:0f:81:9c:99:70:e4:d3:d7:0a:ce:
39:11:20:cd:94:c7:54:6d:6b:f6:ab:b1:3d:21:5d:5b:47:ae:
83:1d:41:7a:db:b0:90:9b:0d:82:ce:bf:03:d6:3f:e5:4a:c2:
14:74:91:85:83:93:7b:be:7a:75:c8:1c:5d:48:04:2a:95:28:
cf:fb:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:53:55 2025 by rpki-client