Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: Acq9MEeHYk1OBy17ywNW7RjDcZj3X7UHzaRSDoBu3Zo=
Subject key identifier: 02:B9:05:84:60:6E:E3:94:9B:39:B9:C9:50:00:CE:A4:41:BA:0D:28
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 01995DC5691C318DD55D2D3CB9A180504002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 15B7
Signing time: Thu 18 Sep 2025 17:00:42 +0000
Manifest this update: Thu 18 Sep 2025 17:00:42 +0000
Manifest next update: Fri 19 Sep 2025 17:00:42 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: InO75cqUl2+yZ2iiS94nc5bOegiDLSU6nRh/7Psf0TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:c5:69:1c:31:8d:d5:5d:2d:3c:b9:a1:80:50:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Sep 18 17:00:42 2025 GMT
Not After : Sep 19 17:00:42 2025 GMT
Subject: CN=02b90584606ee3949b39b9c95000cea441ba0d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:99:97:26:d6:a0:ef:79:72:87:9e:72:44:
34:3a:77:fc:e5:21:6c:41:f6:33:67:92:a1:a1:a1:
a1:2e:09:9a:14:21:3a:33:9e:51:61:86:a5:68:e7:
ff:85:65:4d:0e:5d:01:8a:d3:8e:33:49:fe:05:83:
76:81:e3:a4:8e:1f:a5:b7:92:45:38:1d:f5:83:59:
76:41:3f:b7:d0:65:5c:a1:80:83:b2:4c:ba:cc:63:
8a:81:db:81:7d:f6:09:e4:58:f6:a3:0a:64:0d:51:
95:6e:00:30:c2:ab:16:f3:52:4f:52:75:b2:b5:23:
a8:d5:7a:c0:99:4d:3b:fe:a5:bb:a1:ed:e1:12:fc:
03:e7:01:62:20:e4:60:f0:aa:77:2c:0f:f0:a6:f6:
73:21:65:d5:e8:1c:75:85:87:8d:59:c4:74:57:c6:
cf:78:12:cf:63:76:32:58:f2:05:9e:b1:ac:6c:bf:
de:ee:a4:34:8d:89:a6:0c:2d:fd:80:6b:65:52:64:
1a:c9:74:7a:94:30:e1:bb:05:d2:14:bf:99:c1:f3:
ed:1e:c8:b0:65:3b:51:17:b5:9b:27:46:4e:aa:2f:
92:49:9d:88:12:db:25:7c:a2:49:4b:59:86:ac:7d:
22:9c:a9:a1:3e:8b:dc:6b:db:1c:b9:2f:1f:01:f3:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:05:84:60:6E:E3:94:9B:39:B9:C9:50:00:CE:A4:41:BA:0D:28
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:3b:f2:12:b0:da:87:4c:f3:04:7d:c8:dd:dc:91:77:ee:
01:a3:4d:ac:65:0f:b6:95:16:bc:1f:5a:50:f3:3e:5f:b5:00:
e9:9f:1d:cb:39:c9:6b:9d:1d:ed:42:c0:4f:f4:d0:b9:b0:f5:
c6:b1:47:f5:60:b2:9e:11:09:42:d5:2d:54:af:93:ad:7b:16:
9c:49:74:5f:a7:08:8a:63:8d:29:8b:2f:e9:2c:7f:14:0d:34:
31:fc:d5:27:c4:7d:75:c6:17:99:8b:26:df:fe:48:18:e3:33:
73:b8:0b:4c:c7:06:d7:13:68:05:42:38:08:7a:05:61:cd:75:
c7:fe:42:1d:4e:44:7f:d6:98:6d:9c:f2:de:59:cd:b6:91:f8:
d7:71:b1:be:0e:a0:87:a4:a5:03:8b:5b:4d:c2:2e:80:00:d6:
bb:ff:5d:ae:24:bf:81:fd:bf:9a:ab:49:9d:c4:8c:24:fb:55:
10:3c:b7:e6:18:f1:b3:9f:25:d5:1b:6e:28:74:32:4f:56:1f:
09:0d:e9:19:67:46:37:44:df:18:dc:a7:fb:bd:14:bf:63:dc:
0a:59:db:a3:33:90:65:d7:3d:67:ce:60:fd:79:91:d1:e4:f8:
53:25:7e:5c:0b:11:35:a0:a4:c6:69:ee:cf:41:91:ed:c5:82:
28:a4:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:06:53 2025 by rpki-client