Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: wd3CfFZjBrndu9a0AvNVWga25FAE5VrxpEAjThzFLoM=
Subject key identifier: AB:07:4F:04:52:08:79:8C:45:D8:95:CA:7B:66:56:11:C4:04:03:98
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 01996210206BF78097343DF5F96D0E716F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 0309
Signing time: Fri 19 Sep 2025 13:00:47 +0000
Manifest this update: Fri 19 Sep 2025 13:00:47 +0000
Manifest next update: Sat 20 Sep 2025 13:00:47 +0000
Files and hashes: 1: c629yVpij03V1st9fGOWPyErFvY.roa (hash: FRnWCc8f5gKDYC/CiB/l2kK1E8DLO/vnELNJE9pd/8Y=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: dfcfbmh9cReCNzR9zkSnFKmQ7z1oKRACnJPtKyFF6BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:10:20:6b:f7:80:97:34:3d:f5:f9:6d:0e:71:6f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Sep 19 13:00:47 2025 GMT
Not After : Sep 20 13:00:47 2025 GMT
Subject: CN=ab074f045208798c45d895ca7b665611c4040398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:e3:50:00:70:98:e6:e5:c8:2c:2b:52:78:
a7:52:d9:52:91:18:52:e1:c7:05:13:6d:41:4f:53:
09:69:b9:97:9c:70:44:f6:16:80:e9:68:53:d5:7f:
59:d5:26:37:ff:eb:d6:05:ec:2f:a8:9c:c3:f2:4b:
1f:5a:25:fd:02:f7:61:ee:fe:3d:5f:89:52:f0:f5:
a0:08:a3:0d:8f:0d:36:34:f5:dc:89:e3:13:03:86:
91:b1:45:5f:72:b1:85:a9:b7:26:33:6a:b5:3e:6d:
33:f4:06:8a:91:18:c2:a5:e6:f7:12:89:32:86:81:
53:63:7c:35:28:71:d1:51:39:ad:06:d6:9f:48:1e:
01:3d:02:46:c4:99:bc:9a:1f:65:42:3a:4c:ab:96:
01:c2:c1:b5:22:38:fc:0a:21:ec:c1:3c:b9:b2:49:
f4:85:da:d1:91:24:69:84:8c:62:5b:80:d6:60:93:
6e:5e:81:5b:10:10:92:32:17:bc:a9:dc:ad:c8:a6:
e7:ef:05:86:65:21:b9:d2:6d:9e:fc:a7:0d:39:8d:
2c:8f:24:91:50:64:cc:f0:c9:60:35:89:b6:0d:1d:
8c:30:c8:3f:78:02:e2:f4:cb:f7:7c:9d:80:ff:3e:
b3:69:2a:0b:8e:41:22:b5:74:41:70:be:3e:90:ff:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:4F:04:52:08:79:8C:45:D8:95:CA:7B:66:56:11:C4:04:03:98
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:38:b0:56:7b:f7:11:60:a2:02:44:43:db:5a:32:db:18:72:
f8:4b:71:18:a4:60:3a:c3:7a:3c:42:c6:58:18:1c:99:8e:89:
e1:df:52:9b:09:c4:b5:9a:3f:3f:8b:3a:be:36:39:77:bd:3a:
be:18:29:9a:30:b4:d7:b4:6f:e8:d4:df:94:65:5f:01:36:7e:
21:ac:b2:d6:73:35:6e:60:dc:5a:3f:0c:1d:ca:54:68:60:41:
ef:a7:3f:6a:1a:27:43:20:0d:db:d4:9a:21:36:f3:19:a3:d7:
3b:72:73:02:cf:67:c6:f7:75:c7:58:09:ac:db:c8:f3:8f:c5:
3c:2c:f0:ca:68:d9:c8:65:08:90:14:23:35:96:bb:c4:31:05:
b5:c9:c7:13:7f:67:e8:33:d7:00:31:72:bc:1c:25:36:00:5c:
d1:56:6d:cb:dc:92:b6:18:a4:c1:be:c5:cb:e5:f6:0a:a7:15:
d9:48:6e:74:d3:f8:3f:6e:6f:e3:1a:36:ec:95:00:1c:1c:a7:
04:b4:ed:58:ad:dd:82:31:40:05:98:7d:dd:4e:78:29:9e:36:
21:c2:fb:43:02:8c:ff:40:91:d2:e0:5b:92:c8:29:e4:47:e4:
4d:34:48:6e:d6:65:bd:e1:2d:5c:61:f8:01:a8:1a:53:8a:eb:
2e:d2:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:28:36 2025 by rpki-client