Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: K6khcanYaKZz3dOjpGNrWDLoqLU2LRk2PjnumsIOhXQ=
Subject key identifier: E1:AD:E2:9B:C8:C7:B9:61:EA:68:37:B5:E3:5F:3B:AA:7B:48:B3:5F
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 01992FD9D454E0F3D1BABB4D8824DC162999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 19:00:28 +0000
Manifest this update: Tue 09 Sep 2025 19:00:28 +0000
Manifest next update: Wed 10 Sep 2025 19:00:28 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: aAFMKj34MI04g4DhD46y8JwkJVsVWP93/cWgINoQSFo=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:d9:d4:54:e0:f3:d1:ba:bb:4d:88:24:dc:16:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Sep 9 19:00:28 2025 GMT
Not After : Sep 10 19:00:28 2025 GMT
Subject: CN=e1ade29bc8c7b961ea6837b5e35f3baa7b48b35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:e4:28:a6:6a:e9:0c:5b:93:d7:ea:e1:89:
1e:82:cf:92:06:b4:be:57:8a:64:9b:8a:1a:6f:10:
a3:de:fa:fc:8a:43:0e:fc:b4:7c:ef:28:71:8f:1a:
df:23:ab:2a:d5:e7:fa:10:59:8f:d7:25:29:15:a9:
9c:ea:b2:5a:30:f3:c9:e7:79:b4:1f:ed:a7:1e:2b:
cc:15:6e:ec:58:55:e6:e6:20:68:09:d5:4a:83:c7:
25:02:0e:f8:7f:38:67:70:9e:fb:e1:94:9f:f9:e4:
bc:89:4d:f2:90:32:6e:e6:e7:44:78:6d:2b:58:1d:
2f:09:4b:a0:62:d3:7c:49:bd:ae:1f:8c:d7:39:11:
40:90:45:0d:bb:58:4d:05:bf:0f:75:16:b2:a1:96:
aa:aa:03:5c:99:a3:c1:05:54:d9:57:02:60:03:0e:
00:f0:2f:d7:a3:a3:65:f6:33:9d:0b:8f:9b:b6:85:
5c:16:ac:1e:e3:ba:c9:33:2f:e1:88:01:4a:11:bc:
1b:8f:e4:08:44:ec:1f:3d:63:4b:21:37:94:27:75:
f6:e7:6d:11:c5:53:6a:dd:ce:3a:53:6d:d9:84:cd:
de:86:59:cf:a0:a3:67:f2:89:46:2d:6b:88:59:ee:
77:37:30:8e:62:f7:8b:a9:75:97:47:ae:be:f0:51:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:E2:9B:C8:C7:B9:61:EA:68:37:B5:E3:5F:3B:AA:7B:48:B3:5F
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:38:6e:83:41:ee:90:bd:e6:57:86:68:30:90:45:91:99:
cd:e0:ac:f2:d7:2d:9e:32:59:d2:00:5a:3c:34:24:9d:fe:d7:
e6:04:4e:cd:3c:33:ee:32:36:d1:c7:7b:b3:a5:7a:db:a8:5e:
59:8f:9f:22:6a:bb:58:3c:1c:18:00:6c:47:dc:b7:cc:b9:d0:
43:d0:5f:89:6d:7c:0a:fa:22:8a:29:77:7b:24:b4:45:c5:10:
14:51:b6:8b:ad:f9:ba:d6:f1:e0:7a:6b:55:ec:33:93:c3:75:
f4:25:f2:42:fb:df:de:fd:f4:7c:a6:4c:b6:f5:0a:bb:d6:a7:
16:18:00:4b:3c:46:87:38:7f:2d:68:6d:95:4f:2d:09:cd:53:
92:32:99:a3:c9:5d:22:ea:bf:5f:9d:83:fb:84:24:25:b8:25:
81:60:cd:67:dd:3d:e4:e8:14:e8:5e:ad:d4:6d:4d:53:87:c0:
72:ce:a2:b3:6a:19:30:22:55:bc:7a:cf:40:44:68:76:e8:5b:
f3:3a:df:a4:3b:c0:d7:ae:c0:5a:3b:57:7c:3f:7b:5f:fa:61:
41:34:20:e5:a2:2f:eb:53:61:34:24:61:54:6a:10:bb:ed:ad:
e0:42:ec:f4:29:b4:e6:05:77:e4:be:26:db:26:f7:e8:7b:7d:
67:9d:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:56:13 2025 by rpki-client