Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: L6UNNMJ7rw7WY6e0AVJ6vwXTbcdNBB05YvpNmUjXtuA=
Subject key identifier: D8:35:78:5C:82:59:E6:33:60:C3:23:8C:D3:0F:E2:D3:3B:B6:DA:D4
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 01992E22B6307F3F2A171269FEC05AE864AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 09E8
Signing time: Tue 09 Sep 2025 11:00:50 +0000
Manifest this update: Tue 09 Sep 2025 11:00:50 +0000
Manifest next update: Wed 10 Sep 2025 11:00:50 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: bq8AGpMPv1nmUFE1sB1srbCCuAR6l4vGLb1FJaX1SgY=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:b6:30:7f:3f:2a:17:12:69:fe:c0:5a:e8:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Sep 9 11:00:50 2025 GMT
Not After : Sep 10 11:00:50 2025 GMT
Subject: CN=d835785c8259e63360c3238cd30fe2d33bb6dad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:ad:4d:84:db:3c:79:c0:85:ed:3b:d0:eb:
2c:6a:d0:b8:a1:f0:31:e3:88:dc:65:7b:97:99:e7:
b9:68:d4:1a:1d:0e:15:0f:6e:15:35:81:4c:2f:41:
9b:74:e4:5a:ee:f9:a2:67:32:f5:83:1b:5c:25:b3:
f0:b4:01:19:9f:60:c4:44:02:49:c4:ef:86:d5:75:
89:fc:a8:67:45:0c:0d:2d:62:59:bc:da:04:eb:d4:
ef:ce:b0:ab:7b:cf:7c:09:e3:c6:b5:77:e2:6d:6f:
aa:7f:1e:3c:9a:15:5d:dc:9a:c3:4d:4c:2f:61:a0:
a6:24:a1:83:cb:5c:7e:0e:13:57:cc:45:e5:7d:8a:
9b:1a:19:a2:97:45:b5:e1:b4:d0:f7:6a:05:ac:91:
85:6f:75:81:4a:b2:86:f2:e2:25:8f:ae:84:f8:62:
96:31:90:eb:09:8e:30:ce:92:31:dd:07:ec:df:cd:
01:2f:8e:77:ae:de:95:19:ad:62:6f:23:fc:f1:93:
de:58:75:99:1d:e5:96:eb:45:3b:72:cf:b5:4c:8a:
6f:17:6d:84:d8:f1:e0:0d:56:a7:97:06:d6:f1:6f:
8d:fc:94:1b:c2:53:92:b4:e4:dd:83:35:38:f1:90:
13:c2:79:cf:38:99:02:89:17:a0:91:6b:96:28:22:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:78:5C:82:59:E6:33:60:C3:23:8C:D3:0F:E2:D3:3B:B6:DA:D4
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:67:7a:78:e5:f2:9c:26:26:f1:e9:38:86:88:a0:09:b2:
bc:89:0d:b4:68:bd:36:36:c3:79:2e:6d:c0:ed:bf:75:b1:b8:
30:0c:35:59:10:b3:41:89:35:9d:59:77:ee:73:98:9d:33:12:
4d:a8:af:42:69:bc:89:c1:f3:62:16:f3:a0:fd:76:02:28:3f:
72:37:4a:11:ec:21:63:dc:ec:98:14:11:f0:6e:9a:47:cc:76:
54:de:e4:2d:14:e0:0b:63:92:49:c6:7f:1b:5c:f4:3d:a1:3a:
ca:92:c8:7c:e5:89:20:8d:9f:2d:b6:11:1d:b4:26:74:83:51:
42:c9:9e:b4:0f:d8:d0:29:9f:44:fc:25:53:f8:69:e6:c6:06:
ac:e6:cc:dc:43:13:1a:a2:4d:71:d0:66:53:db:4b:62:35:78:
21:6a:cb:ab:a7:9a:a0:1d:17:d2:0f:14:61:eb:91:a2:70:d4:
5e:4f:b9:58:90:43:7b:77:16:a0:73:53:2e:8d:85:98:d0:1b:
65:7e:b3:70:2b:6a:b0:9c:e3:be:cc:ca:b8:a1:32:ea:b7:6a:
91:68:1b:09:25:c7:c5:e9:e6:66:b8:40:6d:da:f5:e9:a5:11:
8d:0a:3b:86:23:f4:e0:94:4c:ca:20:fe:df:81:4c:46:b3:cc:
02:3a:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:35:36 2025 by rpki-client