Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: t8Phrg7Ftch3pCWvSLzgse/wvMVNaUDC2f5BKx5pFOM=
Subject key identifier: FD:B6:36:DD:67:4C:49:F0:6E:CB:BD:82:70:57:C4:79:49:E1:38:CB
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019921E767056B6CEF055BFEBC90784B7F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 138A
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: O2rKrSYnHM/FvTeAkKLdBw8/Jau1pmpmgl0QCBQKFkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:67:05:6b:6c:ef:05:5b:fe:bc:90:78:4b:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=fdb636dd674c49f06ecbbd827057c47949e138cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:71:96:d1:d1:ef:a4:9e:09:f1:6b:47:03:
71:e9:28:f0:a3:2f:f1:5e:d3:7a:eb:eb:8a:a3:7f:
c6:16:e2:7b:db:da:b8:14:59:38:1e:8c:85:68:4b:
7f:f3:a8:7e:c4:7b:eb:c7:a2:4d:6b:d6:a6:99:85:
b7:4d:19:95:05:6f:5d:8f:02:97:7c:21:b3:9b:96:
cc:6e:9f:93:7f:ad:a6:8b:19:c5:1d:fd:7b:8d:4e:
c8:a2:da:e5:3b:1b:34:53:10:fb:17:ed:d9:86:69:
f4:aa:65:bc:5f:97:f4:3b:61:b9:ff:8d:16:63:8d:
bc:9f:fe:dd:09:d7:99:e5:d6:0d:73:5b:6c:e6:50:
87:c5:21:df:6d:42:0a:ee:0a:4f:2f:35:77:f4:2a:
c8:73:2c:21:0c:f9:70:61:d6:66:0f:cf:18:aa:42:
27:40:ee:ae:ab:44:ae:d1:e4:2e:d8:28:f9:80:7d:
2f:a6:2a:4a:1c:fc:4a:1d:f4:05:7c:40:c0:c5:01:
7c:7f:34:41:f8:3f:6e:cd:4a:12:ab:7a:77:68:14:
04:6c:15:1d:1d:9b:5a:6d:03:e2:5e:ee:01:02:0d:
a5:8a:49:5c:43:ce:42:3f:f8:e4:68:db:b9:4b:dc:
fd:c3:51:a2:a4:93:07:9b:18:41:bc:18:59:74:50:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:36:DD:67:4C:49:F0:6E:CB:BD:82:70:57:C4:79:49:E1:38:CB
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:a8:47:13:c8:e4:2e:5b:36:00:d5:69:d0:7f:c0:a1:3e:
06:32:20:2e:57:06:d9:17:5a:06:c9:e5:2d:a2:77:7b:a6:8b:
1a:c5:5b:3b:9f:48:d8:e5:77:0f:44:d1:2c:d4:c6:4f:2e:74:
48:e4:bc:a8:4c:bc:83:fe:9d:23:bb:1a:be:43:b6:b1:66:5c:
c4:05:aa:ae:da:49:b4:e1:df:ee:09:32:ed:53:7a:7a:0d:56:
52:92:50:59:44:25:0a:8f:1a:04:b1:58:cc:23:c3:fa:b6:ee:
83:5f:b2:3e:07:32:a4:2d:88:f5:35:da:64:b4:50:8c:a6:13:
a8:7f:32:83:6f:3a:f2:1b:07:8b:6c:24:23:6d:4e:b7:2f:4b:
fa:dd:e2:51:f0:80:00:81:30:b7:d2:2b:4a:a3:1e:b0:81:e8:
86:1f:25:96:29:05:ef:56:b4:5e:65:4a:f3:77:89:ef:ce:04:
43:a0:d0:47:ef:ec:88:2b:14:ea:7a:c6:19:7b:0b:d1:e2:5c:
8e:01:6e:87:99:31:73:29:db:e0:cb:39:b5:22:6c:31:03:92:
29:eb:90:57:a6:45:90:6c:33:4a:9d:a0:d8:e7:47:1d:fb:56:
21:b4:b4:a6:4a:1c:93:3a:f2:03:d7:c0:76:54:d5:dd:f8:2f:
5d:3e:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:22 2025 by rpki-client