Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: am7Y6MNzt5dIEWn/reU55+BIEwAPzsru0JdR1IDGEt0=
Subject key identifier: FE:44:9A:C4:39:08:19:89:D2:BE:50:B3:40:00:1B:3D:2E:73:8D:1B
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 01993839869C0F589FC1C3EFCAACD83222D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 160F
Signing time: Thu 11 Sep 2025 10:01:58 +0000
Manifest this update: Thu 11 Sep 2025 10:01:58 +0000
Manifest next update: Fri 12 Sep 2025 10:01:58 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: dEPhvMzNFOnoYkqXx7lcDuTnMf9bKUV0neMVmPP/nWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:86:9c:0f:58:9f:c1:c3:ef:ca:ac:d8:32:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Sep 11 10:01:58 2025 GMT
Not After : Sep 12 10:01:58 2025 GMT
Subject: CN=fe449ac439081989d2be50b340001b3d2e738d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:70:05:20:b3:88:60:aa:23:48:7b:a4:10:
2e:49:41:a8:f9:5b:2c:98:78:2d:f8:1c:f8:26:2a:
c7:fe:21:15:5a:9e:ae:d8:e1:86:79:3a:1d:57:0a:
40:62:19:ce:14:a7:47:89:71:31:c5:7c:aa:2b:82:
ca:78:99:79:88:d7:c3:a6:55:f3:b6:59:64:af:8d:
13:79:e3:3d:7f:af:a7:43:c2:f7:43:6e:41:a6:4a:
de:5f:da:a2:f8:41:ff:96:c0:91:34:da:c6:8e:b4:
e3:c5:b4:d2:ba:81:1c:62:f5:f2:b7:3c:60:13:87:
be:12:a2:83:f5:cc:e0:08:9f:8c:a0:04:92:70:f2:
36:13:89:40:0a:4c:07:20:0a:15:6f:70:02:aa:e9:
49:78:5c:e8:e0:ed:7a:d9:e1:bb:47:b2:66:77:19:
95:d8:3b:a4:67:b8:8a:10:ca:5a:55:d1:e2:2a:ef:
c3:6e:66:c6:89:3c:b0:14:62:d7:1a:b8:b8:fb:e1:
2a:cd:7e:dd:ee:65:06:68:c8:cd:61:50:c8:76:67:
3b:9b:08:2d:1c:c4:bb:ba:42:11:1e:b1:e6:02:2c:
2c:e6:2a:82:22:52:9d:b3:07:00:43:f8:5a:59:89:
95:91:40:24:e3:16:17:53:0d:20:61:ae:67:02:74:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:9A:C4:39:08:19:89:D2:BE:50:B3:40:00:1B:3D:2E:73:8D:1B
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:c9:14:4d:60:66:9c:b2:e4:53:55:94:f9:20:8f:b7:40:
ae:05:d7:8c:56:60:e0:49:28:e6:93:3b:9f:03:b0:fa:3e:e3:
a5:52:f3:8c:b6:57:f3:0a:e4:ba:3d:82:1b:09:3a:fd:c5:68:
58:0f:15:02:7a:41:64:fd:5f:69:2b:29:54:19:4d:f2:dd:4e:
51:6a:6d:27:7a:ea:d4:02:7a:b5:62:b3:a6:36:65:1c:25:8d:
12:19:e7:bf:dc:24:be:3b:29:e0:f5:6f:63:e0:98:a7:16:85:
b7:35:20:81:f5:42:d4:a9:b5:29:79:8a:f5:1f:84:e4:a5:55:
bf:24:3d:76:57:79:20:91:fa:34:75:09:0b:c7:96:d5:d1:3c:
94:04:67:fc:f8:d0:b7:a4:85:f0:ca:9d:59:2d:c8:c3:a8:2c:
69:01:80:e7:fb:59:69:92:02:0c:13:f1:d5:c8:ba:b2:c0:4e:
d6:20:ad:32:f2:54:99:75:d9:28:e3:d3:cb:be:4a:ec:60:e2:
ff:07:e3:e1:68:a3:8d:ab:75:18:91:f0:c9:05:d6:f0:45:97:
ba:6c:be:a3:41:f6:e1:14:fe:3f:c5:d2:4b:4b:20:14:dc:ea:
17:6a:bf:db:0a:d7:41:2c:e0:57:06:ac:63:22:65:3c:68:ce:
82:a6:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:06:18 2025 by rpki-client