
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: E2VO8wZ0u9GopKaaGRURDKmiRqIqo5ud+akPMD+HU5Q=
Subject key identifier: 73:A4:5E:1A:CC:26:ED:6A:17:8F:C2:61:12:F0:DA:9A:F6:6E:C6:C7
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 019933EDE022758E13D5EE5616A5E4074A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1689
Signing time: Wed 10 Sep 2025 14:00:51 +0000
Manifest this update: Wed 10 Sep 2025 14:00:51 +0000
Manifest next update: Thu 11 Sep 2025 14:00:51 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: Qq88v0BFJeSg4btVvrrVtvPsb1dRSyB9rZ0454gMBDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:e0:22:75:8e:13:d5:ee:56:16:a5:e4:07:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Sep 10 14:00:51 2025 GMT
Not After : Sep 11 14:00:51 2025 GMT
Subject: CN=73a45e1acc26ed6a178fc26112f0da9af66ec6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:03:f9:ef:26:ae:1d:fd:e7:28:21:63:2d:
c6:cc:44:50:07:26:0a:43:8c:43:ad:94:94:f3:f8:
71:f6:43:36:f9:5e:e0:c4:aa:1b:ec:33:9e:06:b3:
49:c9:fe:46:d4:b3:d1:1a:4a:aa:92:40:cc:05:7c:
10:f9:3d:53:fb:88:e8:55:c8:6e:81:f8:f8:5a:aa:
27:e2:9f:1e:cb:59:91:ff:91:45:77:98:e4:6e:f6:
11:be:46:c7:54:e3:34:76:80:8c:74:5e:cf:9e:5d:
90:ea:eb:0b:c1:52:bd:1f:ab:c4:f2:b3:d3:db:04:
8e:f3:47:45:8d:4a:66:1a:33:ff:ae:cf:30:fb:b5:
53:2a:82:91:e7:99:5a:dc:9a:d5:b3:9e:57:64:7c:
f9:10:40:e4:31:67:b1:05:f1:d4:80:f1:9b:a6:b9:
59:11:29:5e:c0:a4:35:c0:67:86:0d:6c:0c:90:92:
b1:6e:7f:70:ee:be:9a:31:d1:bb:61:69:63:3a:2d:
92:b2:99:a6:e9:0d:72:b6:9d:4e:4c:3a:a1:d3:fd:
fa:8a:e2:c4:22:27:d3:fd:b6:a8:23:4a:08:63:ed:
b4:d4:50:5c:13:88:2f:1f:db:b8:37:89:c0:82:0b:
95:83:c8:1f:7c:d2:1a:ad:7a:c7:1f:00:9b:49:79:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:5E:1A:CC:26:ED:6A:17:8F:C2:61:12:F0:DA:9A:F6:6E:C6:C7
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:27:3c:1c:5e:3a:a7:d2:03:61:41:41:74:24:9d:48:9b:
5f:d0:78:48:ce:e4:10:f1:a3:04:45:54:8b:19:1d:8b:a1:ba:
b1:0d:8e:64:52:57:d6:e2:66:81:b5:6e:a0:4a:f5:18:eb:a2:
17:60:c8:ba:51:52:d8:35:a5:95:a8:7a:96:9c:e2:eb:47:f9:
14:8a:73:2b:9f:e3:4c:b2:f8:f6:74:87:a1:af:78:bb:f0:98:
b8:b8:62:44:60:4c:6e:18:11:04:c4:17:a0:14:36:aa:e7:b3:
85:0d:4e:95:b2:98:77:0f:40:6f:b1:0d:e5:80:f5:bd:6d:60:
ac:79:44:22:83:22:72:23:f4:ae:30:5e:70:70:e6:0f:eb:50:
b8:93:e4:b2:e6:51:27:06:2f:19:ec:7b:e8:86:58:4b:d4:e8:
0b:02:ce:05:7a:56:5d:6d:9b:ea:d0:85:b4:74:c4:28:cf:3a:
cc:2b:ac:00:b4:a6:fe:c3:ba:61:a0:83:b9:52:a6:f5:9b:d3:
8d:4c:d6:b7:db:94:e3:26:d5:51:35:33:e3:54:49:62:21:a9:
80:f3:09:27:3c:0e:5f:42:cc:46:ca:e9:e2:c7:fd:33:59:a3:
f3:32:18:22:29:67:de:eb:ca:3f:41:2a:6e:9b:46:38:74:06:
cb:7f:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:27:21 2025 by rpki-client