Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: EAIa+Al+qymm+0Ef3DejjBuQg31AA2RUvSdC3bzZjy4=
Subject key identifier: 40:11:43:E1:89:C3:F4:B8:6F:53:39:67:1C:E9:B3:7A:59:C5:64:4E
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01992B5A8762B204AA350615A8C04387B764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 22:02:57 +0000
Manifest this update: Mon 08 Sep 2025 22:02:57 +0000
Manifest next update: Tue 09 Sep 2025 22:02:57 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: dbZ4DS1nXIxWBFW0cfCrfTsy7FG3b4fcX2srwbV9jsE=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:87:62:b2:04:aa:35:06:15:a8:c0:43:87:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Sep 8 22:02:57 2025 GMT
Not After : Sep 9 22:02:57 2025 GMT
Subject: CN=401143e189c3f4b86f5339671ce9b37a59c5644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:11:dd:0a:1c:5a:de:0f:1b:5f:d4:8d:91:
df:0f:6b:8c:4a:54:44:8c:dc:3d:00:6a:95:1c:20:
f2:c1:f0:46:dc:9f:b9:df:77:98:0d:61:ba:3b:11:
64:7d:70:b5:b1:91:3a:eb:d1:b6:d4:86:0b:61:03:
76:da:f9:39:2d:e7:14:c5:95:ee:3d:f6:e3:91:79:
77:9f:7d:95:28:1d:56:cd:43:72:f2:81:4b:d0:b1:
d5:d7:21:41:07:f1:b3:7d:35:ba:02:ac:2c:50:f6:
2c:65:e6:b1:10:75:95:b4:16:42:6d:fa:63:1e:fd:
90:d0:00:a4:42:c4:35:37:29:99:07:61:d5:d3:68:
81:83:46:2b:4f:47:ce:ae:36:2f:f6:50:93:0f:62:
09:06:b2:97:f5:14:63:2e:64:7f:51:4c:31:c5:08:
48:ea:fd:8a:b1:ff:26:b2:6d:df:d3:77:71:a5:d5:
d0:3c:84:f3:51:62:3b:a0:66:17:2b:8c:b3:e9:23:
6c:68:4b:fa:34:17:41:07:25:39:ae:5b:18:2e:90:
08:f8:61:09:a1:4f:f0:35:93:be:40:9a:d6:cf:89:
10:1f:7d:81:04:1d:ce:4d:bb:b3:d0:b8:fb:09:a5:
8e:8e:91:90:dd:0e:a5:42:c2:58:1c:74:ba:44:4f:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:43:E1:89:C3:F4:B8:6F:53:39:67:1C:E9:B3:7A:59:C5:64:4E
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:2c:31:37:66:f1:ce:99:53:36:88:f4:31:5e:83:71:88:
e0:40:2d:cf:ee:49:73:5c:7d:aa:94:c6:03:f3:39:4f:9e:84:
0f:6e:c4:7b:07:b0:c1:70:6c:31:60:41:4a:c1:a0:e6:ed:86:
2b:6c:9f:55:5c:97:f8:f8:a7:fc:44:44:a2:24:1f:63:49:64:
d0:77:36:d8:80:07:6a:5b:cb:24:ef:61:f6:ab:8b:5d:a9:af:
2f:a2:bd:62:a4:6a:17:02:46:88:20:3d:1c:9d:91:f2:37:b5:
bb:28:c1:31:cf:46:6b:79:56:06:0c:0e:74:0b:08:dc:85:83:
50:8c:70:39:81:43:99:66:5e:13:e9:57:39:72:ca:d5:95:e5:
68:3b:ed:fd:18:8a:34:65:b7:40:88:3c:fe:d6:32:96:24:92:
8e:25:b5:fa:1a:2c:8d:4a:e2:7c:dc:d6:8f:d6:24:f6:16:c0:
3c:2e:ca:cb:42:53:b3:15:a1:fa:08:46:af:40:71:99:1b:06:
df:e5:c7:3f:da:1b:16:82:e1:8e:a7:15:ef:ad:4f:ec:e7:74:
22:3a:ef:c6:1c:25:a5:c8:1e:42:dd:4a:a4:5a:f6:e2:c7:14:
80:37:46:4b:9e:ae:22:05:29:77:e8:df:8c:38:8a:5a:2a:5d:
47:7a:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:01:08 2025 by rpki-client