Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
File: jT81agLZZ5zokLXVHg3sLz82M2E.mft (raw, json)
Hash identifier: 1NDoVzoIcYqJPjs705QqxerZZvkv5hruVyxX67xVYQo=
Subject key identifier: D9:77:DA:E4:CB:69:88:6D:7C:4E:5A:2F:72:0A:23:2E:2C:63:89:E6
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 01995009AB8BAC4E40EA572FE91BF5054F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
Manifest number: 10B1
Signing time: Tue 16 Sep 2025 01:00:34 +0000
Manifest this update: Tue 16 Sep 2025 01:00:34 +0000
Manifest next update: Wed 17 Sep 2025 01:00:34 +0000
Files and hashes: 1: EWrLpH4Sf73kpylzjyIWqmsW4Ak.roa (hash: WAVleiEyABWuPtt06sTvvo12euN11LhTBCh1lmQSM18=)
2: TbDm0VV2IIni5MfaMJDxPEqxHQQ.roa (hash: 7X6b+hTk4kXwHQiBVUnERgcn3N8YcwYoax1mTJYhV7U=)
3: YXd5kwg4HgCLWghJcX8C036D1Wo.roa (hash: 4mxl4tWWj/m9oN5bIXyonk91G4n197ABWNjjuhmRTbU=)
4: jT81agLZZ5zokLXVHg3sLz82M2E.crl (hash: +0fxcJEBAmZeNomxsKtmIX6ZjzIr31cVOvY20XUcdJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:09:ab:8b:ac:4e:40:ea:57:2f:e9:1b:f5:05:4f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Sep 16 01:00:34 2025 GMT
Not After : Sep 17 01:00:34 2025 GMT
Subject: CN=d977dae4cb69886d7c4e5a2f720a232e2c6389e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:32:0f:72:db:9e:1d:62:78:a8:39:13:8c:
ff:ca:be:14:7c:0f:a1:7a:5b:5d:9b:41:2c:37:af:
55:d6:bd:30:7e:4e:33:4e:8d:30:20:cb:df:cd:d5:
27:c7:7a:da:d9:c1:f4:3c:3d:51:00:e3:b6:ef:f2:
0a:74:27:e7:a3:fc:76:ee:17:05:1d:58:16:50:66:
06:8f:bc:b8:c5:b9:9a:cb:d7:d4:a4:a8:18:5a:77:
7d:f3:e0:59:9c:48:f4:f6:c8:6b:93:c2:06:12:82:
50:c8:53:67:c4:e7:20:9c:df:7a:95:ed:26:cf:aa:
c6:59:71:13:df:e3:f4:7a:ea:52:70:85:ff:bb:69:
67:5c:da:73:1b:bb:b7:88:c9:9b:ec:83:61:a3:5c:
16:9a:01:fa:ba:79:f5:bf:a3:81:73:74:46:53:fd:
af:55:64:d9:d1:f7:9c:47:1e:79:8b:97:07:3c:d6:
23:57:1d:28:3b:46:8c:b6:b6:c1:76:0b:a1:8e:04:
f7:46:63:91:ea:04:08:f6:cd:5d:fc:5f:9d:22:93:
89:55:41:bb:eb:dc:52:c8:a4:e2:b8:64:a2:21:7e:
1b:6e:50:fc:b5:29:65:6d:0a:9c:31:06:25:5e:59:
3e:01:4c:6a:60:54:74:1a:95:6d:58:65:e0:e4:a9:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:DA:E4:CB:69:88:6D:7C:4E:5A:2F:72:0A:23:2E:2C:63:89:E6
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:25:97:4b:92:c0:3f:de:67:8b:66:58:14:8f:4c:3a:8e:
72:72:17:4e:80:0f:e3:b0:97:ff:c8:c7:02:79:00:f4:a3:9e:
5b:60:d1:03:3d:0a:5d:5d:d3:02:07:c4:92:3e:18:27:c9:bc:
cf:84:b5:6c:e0:7f:f5:09:4d:11:28:f0:41:26:ff:3a:05:39:
84:d9:4c:b7:93:98:1f:ba:05:4f:b8:47:4a:13:05:50:9f:0d:
c8:0a:b6:fd:17:e0:75:5e:e6:49:53:67:09:08:f4:81:ef:e4:
c7:b5:19:26:a7:54:6f:e2:db:37:3f:b2:9f:60:af:2b:54:51:
27:93:79:18:bf:0b:bd:d1:49:1e:14:70:94:5a:8d:a2:4c:47:
87:7b:bd:8a:9d:cc:bc:e5:2f:cb:1d:29:ce:8f:97:c5:a6:d4:
ec:8e:c3:32:38:92:90:63:47:5b:00:b2:79:e4:4f:af:30:7f:
2f:4d:e8:da:8f:d0:1e:77:b9:8c:b6:54:35:37:f2:aa:59:92:
1f:5c:8c:bb:2c:c1:2a:fa:75:d8:2d:6e:12:a8:8e:6e:3e:59:
ff:fd:c8:be:25:4f:ab:b5:06:33:39:53:61:8b:75:ac:b9:fe:
bb:8d:bd:f3:9b:6f:2b:61:97:eb:28:d6:38:92:6e:97:7f:2f:
65:95:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:22:09 2025 by rpki-client