Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: Jcq0ArHufsJz+/O7vUOgcu1rHB9D4KyKpFV47SfwZCs=
Subject key identifier: A5:5E:F7:71:29:56:DC:DD:9A:C7:E3:AE:4E:9E:54:16:F4:25:28:A2
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 0199225590742AC7B6738323CE1B14942523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:56 +0000
Manifest this update: Sun 07 Sep 2025 04:00:56 +0000
Manifest next update: Mon 08 Sep 2025 04:00:56 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: pt7A1w/hCdUM/Zxm+C6y3FVRrib7VRcFJ7hXGBvcVQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:90:74:2a:c7:b6:73:83:23:ce:1b:14:94:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Sep 7 04:00:56 2025 GMT
Not After : Sep 8 04:00:56 2025 GMT
Subject: CN=a55ef7712956dcdd9ac7e3ae4e9e5416f42528a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:c7:05:14:fc:17:0e:9c:78:5f:41:4d:6c:
eb:ce:a4:08:ef:40:5f:ba:f7:de:de:39:1a:a5:ba:
97:8f:82:26:b6:db:a0:a8:38:17:c4:e8:94:ed:ee:
36:22:6d:4a:1d:b9:9b:83:54:1d:22:9e:00:39:bd:
b3:ea:0b:a6:58:98:ea:8f:3e:b5:b5:e7:0d:85:56:
64:22:23:66:51:e2:3e:c2:0b:df:68:ed:24:14:7e:
2a:5b:e4:cc:c9:71:20:7c:9d:5b:d3:1c:d2:1f:26:
55:4f:a4:5c:31:c1:8c:b6:7e:d0:ff:68:a2:36:67:
da:fa:a0:d2:8d:b6:9b:2b:32:aa:5a:f9:a7:a1:2b:
61:fb:81:5b:e6:3f:46:d5:a6:22:53:25:5a:d1:54:
53:df:ee:fe:c0:6d:8e:a4:42:d8:06:46:a3:6d:02:
57:3d:27:61:ff:68:0c:bb:92:f7:ad:ec:4a:2d:d9:
d1:20:5b:3d:bf:3e:24:ec:b0:4c:22:bb:69:db:64:
87:0f:40:a9:c7:ea:96:96:b8:5f:ab:7e:c1:82:d7:
64:eb:25:1d:67:f1:be:26:20:11:72:a8:78:1d:6f:
d8:5a:63:da:c6:de:53:aa:e7:72:24:0e:3b:6f:9d:
b8:d4:23:57:49:56:5a:dc:af:84:fa:03:cc:ba:ee:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:F7:71:29:56:DC:DD:9A:C7:E3:AE:4E:9E:54:16:F4:25:28:A2
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:07:f8:b4:b1:18:8a:dc:a5:ea:07:6e:d3:b9:0a:ff:e6:
26:9e:39:06:7e:89:9b:d2:fa:cc:61:37:36:8e:e0:2b:a7:5b:
a9:d5:a4:3a:3d:74:f8:b4:ba:be:4e:85:fc:ac:2c:1e:7e:ac:
df:f7:07:ab:b0:04:d8:5e:68:b9:21:bb:79:67:7f:40:bb:fe:
d3:50:91:28:c6:26:16:29:1f:c3:95:57:49:ac:87:8d:10:89:
87:7e:f3:a5:24:6b:a7:5f:2c:1e:e9:a3:6a:a7:7e:fa:d4:f0:
dc:18:af:75:e5:68:24:e0:3a:67:af:d7:60:75:e7:d9:bd:6d:
8f:05:09:33:c2:b1:01:f8:72:c9:ba:d4:57:0a:e3:08:ec:56:
84:a7:59:a3:7f:47:36:fb:10:ce:c1:ce:2c:4b:06:0d:a6:db:
ad:f4:62:50:f8:53:96:dc:73:d8:7a:ae:2e:4d:73:0c:1e:a2:
fe:95:e7:8c:fe:35:1f:88:67:a3:07:f9:eb:5b:e4:a0:91:68:
70:f3:15:1e:e8:df:1e:11:0c:6a:89:0e:92:7a:b2:f7:6f:f9:
46:b9:23:31:10:ab:61:2b:f8:93:e4:ee:aa:8b:a7:01:d8:15:
36:6c:93:f2:c7:c3:2d:53:db:7d:8a:f5:39:64:e3:16:7b:ab:
71:95:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:38 2025 by rpki-client