Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: bP5dpkLDQk3oQVT1XNf8vjGGWtenjbDs5RTYljxgGV8=
Subject key identifier: 4A:F8:68:DF:90:FC:C1:9D:FB:F0:B0:9E:CC:73:E3:7B:52:6C:AD:A1
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 0199326D789C01AD90DDB3FE89D7C1AEFD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 07:00:58 +0000
Manifest this update: Wed 10 Sep 2025 07:00:58 +0000
Manifest next update: Thu 11 Sep 2025 07:00:58 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: M+r4ngBLWHIWF6xkkE/o+w6fOId5frBZnrgmKq9RNHg=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:78:9c:01:ad:90:dd:b3:fe:89:d7:c1:ae:fd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Sep 10 07:00:58 2025 GMT
Not After : Sep 11 07:00:58 2025 GMT
Subject: CN=4af868df90fcc19dfbf0b09ecc73e37b526cada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:32:bd:8b:e8:7b:c8:3c:57:8e:08:c3:e5:
d9:d8:2d:18:ef:e0:81:8e:15:9c:74:f3:5b:ff:9e:
1a:3e:9e:97:44:31:b4:22:91:80:51:11:5e:b0:3e:
4c:09:97:ae:0d:3e:1e:f6:77:c6:45:35:a8:a6:60:
71:50:38:82:f7:34:1f:7f:60:e2:ff:56:a2:41:84:
e7:f2:1e:cd:15:6f:34:84:67:fd:54:8a:37:d3:f0:
f6:9b:b1:06:bf:9e:ed:bd:94:8a:57:f3:21:4b:f6:
d8:d8:a3:a3:05:41:6d:7c:1d:28:49:07:d0:12:3d:
43:d4:59:fa:0a:08:3a:70:6c:d5:b6:d3:59:84:35:
86:c7:ee:eb:08:a4:ec:54:31:ac:fe:3f:11:87:45:
ac:3c:30:2a:3d:34:53:a2:3b:e0:bf:f4:bd:00:3b:
d9:18:ad:59:2c:52:da:c0:ab:0c:c4:82:2b:69:92:
44:99:bd:46:15:f4:3a:ce:00:42:62:e7:f0:80:6c:
d4:4a:cb:01:15:f7:4f:a2:e2:47:8e:13:21:b7:57:
22:8c:7d:0c:60:a7:ca:7f:3f:c3:7c:3a:d3:7b:6e:
7e:c9:76:3c:8c:81:d9:1c:47:6a:cd:ad:19:3e:57:
84:e3:4b:55:16:58:88:4b:04:6a:be:5e:50:42:76:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:68:DF:90:FC:C1:9D:FB:F0:B0:9E:CC:73:E3:7B:52:6C:AD:A1
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:c1:91:f7:bc:70:6c:1b:72:94:44:c9:39:62:1e:38:3f:
6c:f9:53:a0:c1:0c:31:8c:da:90:4d:58:4d:c9:b9:ff:4c:dd:
e1:37:28:89:ea:8d:ad:77:c6:75:15:2c:c8:ea:29:08:67:17:
83:56:5d:b8:d2:7b:4d:18:9b:ef:87:a4:a6:8a:ca:2b:6e:9e:
7e:65:86:5f:d0:46:4a:3c:de:64:2b:ab:7b:97:1b:52:2b:cf:
97:fd:24:59:5c:95:b5:66:98:05:2a:7d:a5:cb:1c:c0:3e:1c:
25:17:cd:72:df:50:7b:c7:b4:cc:3c:e3:5c:cd:2d:7b:78:4e:
3b:d7:10:5d:ef:2d:b2:65:77:72:19:5e:be:5b:0e:50:e0:35:
bc:d7:cf:97:45:a1:5f:a9:95:9f:cc:9a:42:a1:2d:d1:f0:6e:
fe:94:ec:d6:0a:67:04:bb:22:51:c7:cb:f4:06:e5:37:db:e4:
a4:cd:ad:12:37:72:cf:25:11:14:e8:4a:ed:e8:50:2a:1c:df:
68:55:d3:bf:de:c4:85:32:ee:d6:27:f1:6a:1b:d9:d4:ff:14:
f2:7a:d1:c7:0a:5d:f1:47:96:60:41:89:74:b2:5f:ba:c1:8f:
fc:90:80:e9:e7:98:9c:9f:3c:94:43:d9:34:0a:76:6c:6b:75:
7c:b9:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:39:20 2025 by rpki-client