Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: n0B9NeBRXlCtbIJrW2k1pTfVGKtl3fJVBXsgJYonrW4=
Subject key identifier: 63:52:26:BC:58:56:50:4B:7C:0F:D4:AE:D5:76:18:93:5A:A3:4B:E1
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 01991E78F62FBDA3CEBB79C79229AEDA57AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0C98
Signing time: Sat 06 Sep 2025 10:01:07 +0000
Manifest this update: Sat 06 Sep 2025 10:01:07 +0000
Manifest next update: Sun 07 Sep 2025 10:01:07 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: 2enbyR1nrfkHK3QA5bRHIa66vdXyekbqcAYOcfM2eqE=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:f6:2f:bd:a3:ce:bb:79:c7:92:29:ae:da:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Sep 6 10:01:07 2025 GMT
Not After : Sep 7 10:01:07 2025 GMT
Subject: CN=635226bc5856504b7c0fd4aed57618935aa34be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4e:cc:17:fd:32:2b:90:f0:19:f3:99:d7:61:
40:36:b0:f2:a0:3b:e8:41:77:36:36:2b:04:7c:95:
33:cb:43:2d:7e:4d:3a:c3:37:b3:50:f6:53:d6:26:
b9:ac:9e:b6:f7:82:50:b1:0f:6c:19:62:e4:83:f7:
82:0f:dd:cf:17:9b:97:19:6a:da:0b:3a:f3:91:50:
08:04:53:ed:53:5f:73:98:5b:75:a7:8b:13:2e:5e:
ae:8a:ef:eb:1a:ba:ca:d0:94:0a:c5:d7:99:17:b2:
3b:87:53:00:b5:81:4c:35:26:eb:2f:15:7e:ec:9f:
11:93:b9:cc:92:94:e9:53:bc:59:f4:da:fe:0f:f8:
ef:9a:d7:a8:eb:96:73:53:f3:58:f3:0a:e4:de:0b:
b1:04:22:bf:43:e4:14:70:74:be:8d:e2:91:96:c4:
98:cb:de:98:00:cd:5a:f8:3c:03:aa:15:aa:9a:2d:
39:b7:70:ca:17:c2:81:35:19:1d:0b:23:1b:0b:c7:
e6:75:f3:3c:66:28:58:55:6c:99:98:b9:68:0c:9f:
24:2e:06:b2:06:58:11:89:44:0d:58:c2:5b:1c:36:
37:7e:c0:32:9a:cf:7b:f0:8e:83:3e:41:25:99:15:
9b:45:e6:9c:8d:47:b7:a7:b1:9e:3f:b0:6c:72:73:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:26:BC:58:56:50:4B:7C:0F:D4:AE:D5:76:18:93:5A:A3:4B:E1
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:23:cd:b5:63:1d:4d:24:32:2b:82:0a:7a:fb:0c:59:2b:7a:
12:56:99:7a:23:65:5a:70:0b:ee:0e:46:55:63:f8:cc:aa:05:
d0:17:11:95:ac:ab:c6:eb:d3:48:46:df:b2:0e:15:46:db:c9:
c5:74:8d:09:64:a8:af:dc:5a:f5:13:92:8b:56:72:57:48:0b:
64:4d:41:b7:df:2f:03:e3:44:07:04:91:2e:70:52:32:83:1d:
4b:84:f7:bc:fe:4f:11:b6:75:f4:8e:17:1c:c9:0e:fa:58:fa:
37:ae:fb:9c:3a:3f:a3:13:b9:ea:ff:f8:f9:f0:c7:95:5d:ed:
f6:20:f3:e3:34:ce:24:7c:a6:c6:49:01:1a:96:8d:ad:b2:48:
2b:5c:ce:a1:02:63:49:f6:ea:16:5e:b6:ba:0a:83:25:e5:80:
15:ed:e7:36:bd:a8:39:2e:03:de:34:92:70:fe:3d:3b:fe:ae:
90:fa:62:0a:b2:ab:7b:9c:b7:80:47:ef:91:2c:ec:69:e0:39:
c1:29:ec:ef:8b:09:d6:dd:bf:e1:53:99:27:ed:b5:2f:e3:08:
e7:05:cd:0b:28:66:9b:3a:9e:4d:cd:e6:e8:88:44:9f:a3:af:
bb:e2:7a:8f:36:70:a0:d7:5d:80:bb:98:65:6d:9a:6c:0e:f8:
9c:24:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:11:21 2025 by rpki-client