Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: vhuUGlFeLFWNfQWLQEiSvTIZq5aFOcSmyUS+XZJWpxU=
Subject key identifier: F8:ED:29:E5:09:2A:06:79:6F:C6:C8:AB:07:E6:EB:00:71:0C:95:B6
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 0199364A65562D473FA86D75C1A3811C4E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 01:01:09 +0000
Manifest this update: Thu 11 Sep 2025 01:01:09 +0000
Manifest next update: Fri 12 Sep 2025 01:01:09 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: aptrlp4NDFFU5qnbKS7A2LewwUaEef4OMzSwNV4SGu4=)
2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:65:56:2d:47:3f:a8:6d:75:c1:a3:81:1c:4e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Sep 11 01:01:09 2025 GMT
Not After : Sep 12 01:01:09 2025 GMT
Subject: CN=f8ed29e5092a06796fc6c8ab07e6eb00710c95b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:3f:56:e4:8f:6f:45:4e:39:1a:32:5c:a6:
d4:b6:07:c9:d0:d7:e1:01:fa:04:14:45:35:1a:78:
06:6e:a4:43:e3:0c:12:89:ad:ad:d8:ec:8a:ab:7a:
89:03:27:71:7b:0a:e1:cd:5c:9b:1f:c1:40:9f:b4:
eb:2b:60:00:d1:8b:1e:3b:46:6a:e6:76:3f:d3:f9:
4c:47:07:b4:f0:29:86:a0:39:35:a8:29:37:e3:fa:
32:ac:9c:5a:7f:0b:49:b6:6f:2c:bd:54:6b:d5:a5:
1b:ee:28:d2:46:e6:38:86:9e:72:65:17:54:bd:e6:
3e:84:fa:32:4f:44:30:57:10:d8:44:ce:c4:09:06:
ce:b1:09:25:1c:46:d1:5e:d3:50:e4:b7:6b:b5:f0:
8a:1f:13:81:ff:a2:a7:22:76:ea:72:f9:6d:db:05:
ea:45:fa:58:29:55:0a:61:25:91:d7:3a:bc:b1:de:
18:f1:7e:80:ba:fd:df:7e:13:f0:2f:e2:1b:6b:ce:
e6:d2:0f:41:8e:d8:d0:42:0d:d8:59:19:da:6a:cf:
a7:fc:ad:a8:45:c1:f1:b5:b4:dc:bb:e5:b3:e2:bb:
7a:a6:97:c3:a6:5f:11:ce:70:da:40:2f:b8:fb:f8:
ea:df:ae:4d:5b:2c:96:91:10:8e:5b:06:a6:cc:7b:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:29:E5:09:2A:06:79:6F:C6:C8:AB:07:E6:EB:00:71:0C:95:B6
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:81:02:02:52:bb:67:8b:a4:56:d4:e7:37:d9:77:bc:b9:
7c:57:bc:b5:7a:e6:be:07:54:b5:76:53:a8:f4:2d:53:f0:5e:
ef:74:b5:61:29:3d:1d:74:cf:bf:5d:d6:95:83:8f:39:1c:14:
84:a5:1b:05:4b:18:9e:35:55:a0:d5:17:31:cd:da:9b:28:9e:
15:8e:86:50:c3:a8:8b:a0:59:31:03:f0:e5:5a:4f:c2:46:7b:
cf:aa:be:13:ab:ed:02:70:15:51:88:27:bb:a3:db:88:0c:b1:
2d:be:ba:59:f9:ad:ae:c3:13:16:21:29:15:a3:84:7b:30:3e:
74:6a:ce:30:b3:d7:43:43:c5:f6:9f:6e:80:79:8a:60:e6:a3:
1e:f8:be:4f:aa:2e:21:1d:7a:8f:79:2f:1d:a1:6e:f1:2f:d1:
40:d0:a4:80:16:22:45:21:c8:f1:c8:44:e4:70:4c:3d:06:73:
fb:dc:99:cc:0f:84:10:09:09:e9:b0:2e:ea:83:70:dd:65:aa:
47:1f:fe:7a:ae:27:5d:b8:5c:7e:7e:ea:fd:9c:75:4f:b1:46:
0c:d8:c5:cd:67:7d:7c:ab:b1:9c:7d:2e:d0:df:d2:2f:4d:1f:
1e:a3:2e:a8:45:02:cc:d1:3f:02:23:bf:61:ae:02:e7:f3:59:
91:f3:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:47:40 2025 by rpki-client