Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File: JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier: SXTNGWS4kdQ6YQWoBU95kQvVtYAJZkKK0vPGoVp3cms=
Subject key identifier: B7:F2:36:AB:37:1F:31:2F:09:7E:93:C1:9C:5F:08:AE:77:5E:D9:44
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019923A055F51D5A2ACEA7429EADED40BBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number: 02C0
Signing time: Sun 07 Sep 2025 10:02:14 +0000
Manifest this update: Sun 07 Sep 2025 10:02:14 +0000
Manifest next update: Mon 08 Sep 2025 10:02:14 +0000
Files and hashes: 1: 3T-1XN6_cwuMNW22iL1_AA25sSU.roa (hash: zx2BF5CFYR8Sr363pI6NcjPdMBZx2ThD7Wo/N06Wwyo=)
2: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: G3doj/eIpc4+8JVd3qfRxxdP8y9y8yAdv8d1uwOnpxI=)
3: kB78k7d7cNChEiOEdhutVluA5Eg.roa (hash: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=)
4: wDk7LmI6cHqgPwoPiReork5n7TM.roa (hash: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:55:f5:1d:5a:2a:ce:a7:42:9e:ad:ed:40:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Sep 7 10:02:14 2025 GMT
Not After : Sep 8 10:02:14 2025 GMT
Subject: CN=b7f236ab371f312f097e93c19c5f08ae775ed944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:8e:f8:f9:35:29:7d:24:a6:16:27:30:af:
44:64:dc:6a:3f:95:ed:4e:19:86:ab:82:be:62:87:
62:14:13:21:14:d6:65:c4:c2:88:51:24:58:3c:17:
37:fd:3b:d2:ed:5a:85:9d:6c:b3:4f:d0:bf:cd:1b:
e4:04:9b:53:78:40:5d:a2:5f:da:ef:d7:38:9d:96:
5e:4f:24:0d:0d:c7:dc:f6:c3:bf:0f:31:81:88:14:
a0:49:42:b6:43:2a:4b:42:84:c3:bc:f0:7c:8e:5d:
c2:16:d1:79:66:31:b1:5d:61:2f:f6:eb:7d:5c:fd:
e5:39:c3:99:03:34:0c:8c:33:01:50:c6:7b:27:58:
3a:8e:bb:e9:c7:73:97:7c:7e:dd:33:88:a0:73:68:
dd:84:3e:e4:72:0e:69:8f:4f:17:50:29:ef:9d:f3:
b9:35:c1:1e:72:96:2d:43:38:a6:c6:c6:01:ba:b2:
fa:2a:dd:d3:75:ae:ce:aa:81:d2:2c:46:3f:df:91:
a0:9b:76:e4:aa:4d:7e:84:68:46:c7:89:2e:d7:65:
16:b7:54:c6:5c:ce:56:c7:59:c8:cf:f2:a2:a7:23:
4b:1e:31:31:cd:86:9c:b9:9f:0b:71:03:20:c6:14:
66:a4:37:df:6f:d8:6d:78:ea:a9:13:f5:0a:8f:b0:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:36:AB:37:1F:31:2F:09:7E:93:C1:9C:5F:08:AE:77:5E:D9:44
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:c1:7c:98:0a:50:6e:ac:8c:f6:7d:9f:cf:1d:98:8e:cf:
b7:62:87:56:34:cf:8c:a1:d7:bf:ce:76:5b:15:74:ca:38:23:
9a:d9:9e:b9:d1:f5:a3:3f:42:b9:ac:41:b9:22:25:33:0e:f0:
f1:9a:78:4b:08:0c:4d:46:f4:c6:89:34:7a:77:c8:e0:7b:ba:
b8:3f:3b:33:bb:c8:ac:7f:e4:7b:69:37:9b:c1:ff:31:87:13:
48:ba:13:cc:49:e2:ed:e7:78:b0:d2:b2:5d:ba:59:42:97:bf:
35:00:b8:f1:22:43:f2:a0:1c:f9:c9:bf:ea:fc:42:6e:87:45:
5c:6e:02:fd:20:f9:6a:49:6c:2f:a7:b9:76:66:83:0d:f3:48:
e6:87:7e:b0:91:74:e0:76:49:06:54:7e:33:c4:59:1b:eb:00:
c7:66:8d:ad:3f:d4:66:46:cc:44:9f:e0:48:3e:8e:49:85:9d:
de:d5:9c:2a:1d:1e:eb:fe:a4:87:3f:51:db:53:5e:1b:96:33:
32:58:b8:5f:fe:6c:42:4e:c6:a0:75:4c:c2:e6:b3:75:f5:ad:
3a:cb:0f:29:f2:27:69:73:9f:7b:6d:91:f9:9f:be:3e:51:f7:
b0:01:bb:92:a8:39:05:3a:e1:01:b5:dd:77:3b:b3:c8:e4:ea:
0b:1b:77:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:37 2025 by rpki-client