Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: phCk9trcPeL1NezKHuA/W+bS+dzvrBxy+3iPvbm1J8E=
Subject key identifier: 1D:68:A6:6E:4A:A0:86:01:CD:A9:F8:78:85:32:28:62:C0:47:12:B5
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 0199228D1684DDCD602F5861C77C05D08290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 05:01:35 +0000
Manifest this update: Sun 07 Sep 2025 05:01:35 +0000
Manifest next update: Mon 08 Sep 2025 05:01:35 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: xrnMBXjFSYRv5YvDAlxFtSA36LJB95M4UzJqVM9ixHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:16:84:dd:cd:60:2f:58:61:c7:7c:05:d0:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Sep 7 05:01:35 2025 GMT
Not After : Sep 8 05:01:35 2025 GMT
Subject: CN=1d68a66e4aa08601cda9f87885322862c04712b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:24:87:2e:77:16:49:7b:61:4a:b9:e3:41:
2d:b8:0e:75:64:01:1e:58:33:83:93:7c:8f:9b:b0:
73:96:6f:b2:d1:ed:15:67:72:33:96:96:71:c7:ea:
3f:e6:e6:34:e9:af:cc:57:ba:7d:d5:79:22:33:26:
2b:b8:c2:1b:29:70:fe:75:34:c2:6a:e4:63:5c:a8:
2d:d8:cf:8a:87:dd:87:1f:f1:dd:eb:f1:43:29:97:
ef:35:fd:0c:b6:6a:07:a8:ce:6f:98:19:5d:67:4d:
d5:b0:82:0f:9b:84:7a:6e:62:f4:2e:54:cf:1f:8e:
8d:2e:81:fd:30:aa:d1:fb:98:8c:9e:a0:c7:7d:09:
d9:8b:35:65:06:5a:45:a5:9d:75:4b:ec:cc:a3:ca:
3d:c5:b2:15:02:ae:2a:8b:1c:0f:3a:5d:bb:e9:77:
1a:de:b0:c0:54:2c:ff:99:44:e6:52:b2:c8:86:39:
44:08:a7:40:37:0f:d1:b9:5e:7a:4a:8c:db:ff:85:
1a:b8:da:b0:79:35:0f:a0:24:c0:c5:6b:a4:03:0c:
0e:2e:c1:b5:d3:ab:ab:5f:af:49:45:5e:95:16:fe:
15:60:ee:ec:91:4a:61:11:71:36:8d:42:0d:b5:ae:
ec:fd:19:e5:53:26:c0:cb:53:49:17:35:e0:a7:5a:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:A6:6E:4A:A0:86:01:CD:A9:F8:78:85:32:28:62:C0:47:12:B5
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:3e:63:c4:df:6f:a7:9f:67:d5:41:57:af:1e:90:11:8b:
bc:e6:c6:cd:69:a8:73:c8:fc:43:d1:59:a5:0c:14:a7:fe:2b:
61:3b:ac:0d:0f:5e:61:2d:8c:17:82:cb:1a:80:44:be:34:4b:
76:42:98:9f:53:c6:2d:13:ca:3b:d8:b9:89:85:83:14:02:90:
34:cf:ef:4b:7f:7d:f4:40:b8:d7:88:9f:74:d5:61:f5:b0:da:
2f:eb:70:36:ea:4e:f6:66:4b:35:6a:7e:47:48:32:1c:07:0a:
41:26:dd:b9:44:22:33:04:c9:f7:86:15:70:5f:16:a8:7a:a0:
69:b5:20:10:f0:d3:81:5f:ee:9b:81:d6:e1:b7:ab:d8:7c:24:
49:ca:05:11:03:51:11:a7:eb:8d:dd:c8:66:9f:d2:41:d4:ff:
4c:2a:bb:4a:31:c4:72:1a:7d:76:e7:6a:16:9c:eb:0d:0a:a4:
9c:53:a8:bb:a2:d9:f5:b5:56:1f:d9:92:bf:30:cb:fb:c3:e3:
0d:d7:f5:9e:ea:58:3a:68:29:dc:3a:0f:a7:b1:c3:0f:bf:b5:
20:c7:a3:ab:0a:8b:46:fa:f2:de:31:cd:81:9a:11:c6:4a:04:
d8:54:7d:ca:17:c9:e8:e3:de:f0:8e:9c:3c:13:10:a1:a9:a2:
08:cc:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client