Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: 1HymU2sV+GVGY+mAqp+VrC8DtfGcHQIpzrSF50IH8pY=
Subject key identifier: 4F:CD:07:14:87:98:91:97:C8:E5:49:AB:2F:55:81:33:82:1C:3A:79
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 0199356EBA9A389CF4C9A932F8EA46AF6571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1457
Signing time: Wed 10 Sep 2025 21:01:13 +0000
Manifest this update: Wed 10 Sep 2025 21:01:13 +0000
Manifest next update: Thu 11 Sep 2025 21:01:13 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: OnBny6AKuazpvgXOxZJuwG7wdJ+yv8/byCYvvVcWwGg=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:ba:9a:38:9c:f4:c9:a9:32:f8:ea:46:af:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Sep 10 21:01:13 2025 GMT
Not After : Sep 11 21:01:13 2025 GMT
Subject: CN=4fcd071487989197c8e549ab2f558133821c3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:98:c6:4e:46:bb:95:d4:a3:6f:85:7f:86:
77:56:08:c1:84:21:b7:9d:6f:52:14:b7:a5:d4:a0:
bd:3d:7d:a1:5e:71:88:de:b8:45:2b:40:11:48:d0:
0c:9f:9c:6a:b7:47:08:30:ae:83:e7:99:1a:18:c7:
97:51:28:37:7c:ee:25:81:b7:07:de:c4:bb:47:0b:
55:17:67:35:b3:12:9a:d3:99:bf:f9:b6:ea:3b:ee:
f3:9b:a6:5e:66:b7:4d:fa:13:c5:a0:96:6b:a7:dd:
0b:97:cd:98:1a:2a:c1:9f:c8:16:c1:8c:fe:5d:28:
53:ea:a6:87:9d:b1:8a:17:09:0e:b3:df:0c:7f:f9:
0f:4d:a8:48:68:23:f9:34:01:3d:d7:b5:f6:43:a6:
04:3e:7b:53:0a:d8:5b:e6:75:b7:a2:5b:e2:a4:63:
c2:ba:89:ca:dc:99:6e:7c:f7:25:d0:71:09:bf:66:
87:ba:ed:dc:05:c5:7c:8e:e1:25:97:c5:8a:13:02:
fb:99:2a:0f:09:47:0d:2b:b3:02:e8:9e:5e:f2:2a:
38:35:a6:24:70:a2:ef:6c:32:fd:3f:84:89:55:93:
d8:81:e4:03:66:bf:a6:84:27:8b:34:0c:35:e1:7a:
df:b9:18:37:ff:f8:4e:96:50:32:15:52:81:0d:23:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:07:14:87:98:91:97:C8:E5:49:AB:2F:55:81:33:82:1C:3A:79
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:20:5d:95:9e:a1:09:a9:61:ca:56:78:57:23:ad:41:98:50:
3a:b1:aa:98:98:0c:8a:3c:00:1b:f6:f3:91:35:16:ab:eb:5e:
7a:34:08:39:21:71:c6:d8:0c:63:32:a6:ad:db:a3:80:3a:0c:
9f:92:a3:32:d9:9a:d5:18:0f:42:57:cc:7d:07:32:17:12:9c:
eb:72:77:e4:c0:c7:3b:2c:08:22:19:f2:6e:81:75:74:11:c9:
5c:87:3f:41:fd:81:78:24:10:9d:e1:00:2f:cc:ea:e3:65:10:
f1:85:ed:92:3f:ba:02:ca:00:a8:18:63:fb:51:ce:44:f0:70:
45:63:00:17:d5:9e:5f:af:a6:9a:3b:42:57:0d:6a:75:13:33:
27:d2:a8:fe:1e:52:d5:1a:fa:db:4a:49:4e:a6:75:9b:35:d4:
20:1e:28:70:fd:b5:90:bb:bb:88:c2:ae:fe:95:b7:56:de:9e:
55:f9:bd:0c:86:6b:fe:3e:64:9c:cd:10:c3:98:b8:b6:53:d4:
ca:d5:5b:33:6f:bf:21:d0:74:21:8c:8d:f1:80:0d:13:a3:cc:
8c:01:91:b9:aa:46:a3:db:a1:01:11:5a:c5:1c:69:9f:1c:da:
3c:c7:35:de:ce:06:92:c8:62:c9:db:3f:43:3c:6e:72:14:cf:
e7:89:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:29:25 2025 by rpki-client