Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 02v4YKlUIQnqeNf+emRHctu88FhcZyYdm41HKTmJ5q4=
Subject key identifier: 99:72:E6:F8:52:98:02:57:FC:32:EC:65:5D:32:84:F8:3D:43:3A:91
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019931FFCB7B27ECDF9F4168B76451B0E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 05:01:11 +0000
Manifest this update: Wed 10 Sep 2025 05:01:11 +0000
Manifest next update: Thu 11 Sep 2025 05:01:11 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: eguIho+Bfow5T/P5fvvPuk9A90b1Bjtikl3pG/3nW44=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:cb:7b:27:ec:df:9f:41:68:b7:64:51:b0:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Sep 10 05:01:11 2025 GMT
Not After : Sep 11 05:01:11 2025 GMT
Subject: CN=9972e6f852980257fc32ec655d3284f83d433a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:ed:b5:76:bd:1e:63:85:bb:20:0a:f7:59:
7a:3d:27:3e:f6:f4:7a:93:86:4b:fd:e1:9b:7f:94:
97:77:ea:c5:24:0c:5c:50:c5:ed:42:ad:45:38:2c:
a8:7a:8a:9f:6c:39:81:39:64:7a:60:0a:94:80:e5:
3c:6a:5a:b1:68:56:a2:b2:29:23:47:2b:71:91:33:
64:4e:89:51:89:0b:21:92:43:6e:a3:bf:15:53:16:
aa:a8:cf:e7:90:31:ff:44:07:c4:3c:21:c4:0a:3e:
a5:4e:a6:27:77:73:d2:9b:28:9c:b2:11:39:d2:7e:
06:e4:bd:70:b4:6f:4b:c8:6e:19:5d:55:8b:da:42:
db:11:67:1e:20:8e:ec:f7:7a:8d:f1:0d:4c:b3:9d:
a4:68:10:09:55:7f:f8:45:a3:de:b2:1f:a6:b6:c1:
9d:bd:5d:24:76:6a:5c:a5:da:ca:35:44:7e:ac:b0:
e5:e5:68:bb:8b:bf:52:1a:41:4d:1b:f4:7e:e5:72:
e8:87:cd:f2:0b:86:02:a5:83:69:55:a7:81:27:3f:
4b:c0:2e:b3:ba:31:77:74:e7:31:96:64:ca:5e:ab:
98:f7:47:0d:ee:94:36:3f:3e:ae:ee:21:01:f9:6a:
67:5a:7e:1f:8d:29:98:c1:07:69:db:95:00:d0:99:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:E6:F8:52:98:02:57:FC:32:EC:65:5D:32:84:F8:3D:43:3A:91
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:8c:63:ba:84:6d:4e:93:d0:c8:2d:1f:57:ed:51:eb:a7:
f6:33:bb:89:24:32:50:49:57:41:7d:4c:e5:1c:42:59:13:f8:
44:ab:31:63:f1:c1:e4:ed:73:0e:6c:a5:01:89:33:4d:f8:e9:
c6:ba:7f:c3:52:c5:fe:c2:f3:ef:c2:01:e3:b2:ae:5e:67:5f:
d8:5e:52:a2:8a:72:9b:08:ae:09:c9:c3:b7:91:27:0f:a9:ac:
cb:8d:37:44:0c:83:f7:2c:82:75:70:28:f4:ed:5b:b9:88:ad:
60:10:f6:ce:60:6d:c5:59:58:16:52:34:bf:83:0b:fb:05:a2:
75:95:cc:5e:64:bf:7d:49:25:8a:62:1d:e9:74:a2:62:35:0c:
43:7e:4e:cd:32:1f:15:87:2a:a7:27:58:91:21:44:bf:ea:bc:
fb:60:78:02:22:f1:a8:94:cf:e8:d3:9c:71:a7:9b:61:1c:e8:
bb:c1:40:51:c2:e5:e2:e9:d2:14:48:1f:2a:36:94:9e:03:ac:
e7:d3:39:26:05:a3:b1:5a:97:61:83:f2:1e:e0:f3:fb:5a:36:
d1:bd:28:2b:72:03:cc:8f:a6:ef:11:5d:f3:ef:50:63:22:5d:
e4:45:aa:a4:0e:a0:0e:8a:0a:e5:c5:9b:db:a0:40:6f:cc:8a:
3d:80:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:30:06 2025 by rpki-client