Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: 53pOyntNODBptPcIVsqOtVhCslmn3XBniqtGzsaeE2Q=
Subject key identifier: D5:77:77:F1:7B:12:F3:84:CB:10:78:D4:4B:AD:39:19:1A:1B:2F:FA
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 0199228D23FDBAE168643224AE2A8154D66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0E8E
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: PPleMJQHk+o/boQRoIaZgugJrRpvBzxMKuRRH/wy8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:23:fd:ba:e1:68:64:32:24:ae:2a:81:54:d6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=d57777f17b12f384cb1078d44bad39191a1b2ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:be:e3:4f:12:74:f3:34:91:84:a3:e5:dd:
0d:20:57:c7:59:49:87:3b:d4:7f:3e:82:c6:cc:18:
8a:d6:11:e1:60:8f:9d:89:82:16:02:e6:8c:b2:f9:
ab:68:25:8d:40:3d:3f:30:6d:79:33:f9:c7:9a:71:
19:bd:0b:ac:cd:ff:e5:a3:80:ed:ea:dd:4a:12:c9:
ca:e8:f0:48:8e:46:85:6c:18:da:85:86:23:84:44:
7d:75:ce:f7:66:bf:f7:6a:f1:1b:f4:26:29:6f:3c:
22:94:70:d0:34:35:97:a7:2d:ad:93:01:5e:74:89:
16:74:b6:f7:84:b4:da:4e:b8:e0:cb:51:12:e7:7f:
05:ee:bd:8d:85:4e:21:20:e3:93:f5:af:5f:f4:45:
a9:3d:0f:8d:10:9a:90:9c:0c:1d:41:56:c6:ee:94:
aa:f5:9e:ac:94:53:9f:81:eb:63:17:63:22:70:5f:
72:98:9e:66:92:52:4c:7a:4e:96:53:e7:80:87:75:
fd:b3:91:56:39:b0:1d:65:46:31:77:4a:d0:54:b2:
d5:cd:9a:96:c0:eb:be:5e:4b:16:93:ad:a3:24:fd:
75:0c:04:c1:75:5f:c4:4f:07:86:fc:6c:01:e2:34:
8b:ae:0b:1e:f0:a7:39:18:58:14:7b:ac:d9:f7:c0:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:77:77:F1:7B:12:F3:84:CB:10:78:D4:4B:AD:39:19:1A:1B:2F:FA
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:fb:7e:a9:13:72:a7:0d:00:82:82:09:80:8a:07:19:4f:
c8:2b:35:86:eb:a0:ba:0a:92:ba:ef:ad:f8:2b:73:b3:ed:77:
56:4f:7a:09:dc:15:60:2d:5c:73:a9:6f:4e:97:29:d1:72:1d:
bd:a2:2c:aa:31:30:a2:d5:68:ac:c1:b9:dc:8d:52:bc:33:e3:
34:01:a6:4c:db:db:da:2f:04:0c:15:8f:cd:09:b3:e3:86:6a:
8a:04:8c:dd:13:80:63:c1:d0:09:c3:26:ce:78:6f:a9:61:70:
ed:9a:d2:82:0b:aa:b2:28:50:77:81:c6:f3:7e:e7:64:16:09:
29:b5:95:01:9d:0b:94:89:c0:b8:b4:68:d7:4a:87:64:1e:98:
ba:2a:51:07:c5:fb:bf:f6:b5:27:9e:71:c8:0a:68:03:f3:e3:
95:c2:64:bb:5c:ed:4c:50:58:a3:07:63:69:11:2c:b4:0b:26:
d9:61:74:f4:d4:21:c2:2a:33:0b:dd:df:3a:7b:b8:1c:e5:52:
e8:39:d3:2c:f0:e0:06:fc:21:ec:f4:92:6a:b8:be:6a:fb:69:
3b:fe:09:13:fe:70:04:56:d9:56:28:db:92:e4:5f:b2:dc:45:
a1:e8:19:90:ed:f0:d7:3a:43:79:06:b3:86:07:41:33:ad:b9:
7d:ef:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:18 2025 by rpki-client