Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: NS0rez9Uy1gpKoYyXIp7sMx991VuYhbt6bkNo7jlnDo=
Subject key identifier: 9C:7D:3A:06:A0:C8:49:04:70:8A:99:AD:0D:99:57:73:59:46:ED:A5
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019935DC143B191E90B0E41C51AE2996C001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0CB4
Signing time: Wed 10 Sep 2025 23:00:39 +0000
Manifest this update: Wed 10 Sep 2025 23:00:39 +0000
Manifest next update: Thu 11 Sep 2025 23:00:39 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: KhTTcxRhKfMhhPwmjGmSifpT5Tiyg5z42xCT0w8MgaY=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:14:3b:19:1e:90:b0:e4:1c:51:ae:29:96:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Sep 10 23:00:39 2025 GMT
Not After : Sep 11 23:00:39 2025 GMT
Subject: CN=9c7d3a06a0c84904708a99ad0d9957735946eda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:1c:7f:25:ae:78:eb:a8:71:e5:1d:8b:25:
88:ed:aa:28:3d:18:a8:c5:e5:4c:d2:52:21:2c:1e:
20:77:c1:89:a9:2b:05:12:60:b2:67:c3:3d:c3:78:
f6:35:35:03:31:70:34:ae:d4:8b:39:e9:fc:08:09:
dd:bb:f7:69:f3:21:f4:1f:91:58:7b:ec:33:56:e5:
d0:b8:94:41:e1:2b:51:b6:36:e6:69:e8:ae:4c:5e:
45:23:d5:e1:2f:f8:e2:af:7b:3f:60:57:ab:3d:82:
d9:78:a1:82:66:6e:2c:f0:94:33:a8:03:47:79:ec:
1b:9c:04:be:02:08:2d:28:a2:7b:59:d7:23:60:5f:
db:d2:5f:bd:0c:80:28:fc:37:96:b3:ef:cc:10:9c:
02:c4:95:1d:8f:e4:38:65:dc:3b:c9:b3:7f:e0:a1:
a8:67:e7:0c:41:02:c3:21:2f:8b:40:59:b3:c0:60:
8e:c8:97:f2:7e:b5:72:39:b2:df:ae:01:90:83:52:
68:ac:bb:7b:5d:82:71:84:b5:50:ce:c4:71:5f:fd:
d7:40:28:87:b1:dd:35:df:db:55:bf:e9:cc:2a:14:
4c:4b:af:7e:70:25:63:00:30:31:04:9c:26:4c:63:
07:ee:8c:d1:99:7a:cc:11:5a:b9:9b:82:19:32:c1:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7D:3A:06:A0:C8:49:04:70:8A:99:AD:0D:99:57:73:59:46:ED:A5
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:6f:0f:8c:43:4f:3d:69:b4:58:56:fe:d3:3e:de:52:92:
be:3b:36:35:43:56:77:82:9c:c2:90:32:24:49:08:fb:99:34:
0a:6c:41:4f:75:3e:9b:b6:01:7d:5e:97:96:0b:8d:b8:17:7d:
aa:7e:12:3a:2b:a7:b8:21:88:5b:0b:36:63:7f:03:cf:d5:82:
84:af:be:b6:97:7d:f0:c9:cf:3f:6a:f5:67:df:24:ba:d7:89:
b2:6b:a7:7e:df:9a:f2:82:e1:65:b0:8d:6f:58:49:fb:6d:35:
d0:70:68:32:17:5e:3d:63:57:3c:5b:54:5a:63:29:24:f9:20:
4c:bf:e6:64:23:33:2e:41:c6:94:20:93:e5:81:5f:29:c8:95:
68:89:18:c5:40:ab:1e:cc:50:3a:a2:01:f9:35:95:9e:d8:be:
26:38:1d:2d:2a:f9:12:77:cd:fb:43:71:9d:87:56:61:1d:11:
d2:c0:31:05:32:fc:af:0b:53:a2:f3:30:30:c0:50:24:59:62:
af:7b:6b:78:a2:0e:da:d5:b4:7d:37:d5:d6:81:64:3f:46:14:
da:18:7c:57:52:a7:7e:4e:1f:cb:99:34:86:6c:d4:c4:aa:b1:
8f:9f:79:58:7e:32:b6:61:2d:e1:19:90:32:f5:8c:8c:17:de:
aa:6d:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:27:18 2025 by rpki-client