Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: 1uEKgvqUR68ny5KQsOmiI8uhd4hG/MrPma7pah+t3wY=
Subject key identifier: C1:AB:C5:F8:E1:A7:25:2D:B5:55:D6:A4:A3:6A:2D:92:D7:5E:30:26
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 01993725CED544740629942F499569B40F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 05:00:48 +0000
Manifest this update: Thu 11 Sep 2025 05:00:48 +0000
Manifest next update: Fri 12 Sep 2025 05:00:48 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: Np3VAbGbk+Rfrmv9jlz9+RRRiXfWz9xuzwRkI3bvukg=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:ce:d5:44:74:06:29:94:2f:49:95:69:b4:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Sep 11 05:00:48 2025 GMT
Not After : Sep 12 05:00:48 2025 GMT
Subject: CN=c1abc5f8e1a7252db555d6a4a36a2d92d75e3026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:95:64:10:ed:d5:d3:be:5e:bb:95:0b:3d:
57:ca:26:22:03:0b:0d:ba:ba:94:de:8e:ec:32:6d:
de:ac:bc:a6:cd:e3:61:73:21:c9:51:49:66:31:92:
c9:bf:df:61:cf:10:15:2e:f6:dc:75:83:62:cc:61:
47:99:1b:3b:27:14:d2:7e:c4:0a:51:9b:8c:14:b2:
27:05:af:ca:05:a2:e6:e2:9d:9f:3a:17:4d:2b:2f:
b1:42:3c:01:60:b8:66:d7:ac:c8:c9:77:a2:3a:d1:
76:d6:ff:f3:03:82:ce:48:87:71:68:fd:7b:d3:9d:
93:eb:5e:ee:19:98:54:fe:ac:aa:f8:14:e9:39:ef:
63:2f:e4:bf:4b:da:f8:fd:63:11:4f:13:f0:2c:5b:
92:17:7d:09:02:13:cc:94:4f:de:ea:ff:06:e9:16:
20:b7:25:85:e4:d3:d7:62:77:ce:f2:3e:47:47:79:
d7:81:4d:e9:0c:59:08:d8:08:11:a6:e8:0d:7f:b6:
24:35:11:87:13:31:eb:f3:4b:a5:f5:9c:79:9a:f8:
36:25:ca:fd:61:dc:b5:be:17:07:55:02:af:26:eb:
7d:6f:ac:fe:01:1a:3b:17:a7:73:e1:f1:fc:c8:2b:
03:e2:8a:dc:2b:e6:f1:2a:54:76:7b:6a:23:0b:a4:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AB:C5:F8:E1:A7:25:2D:B5:55:D6:A4:A3:6A:2D:92:D7:5E:30:26
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:71:11:ab:26:b7:62:43:39:e5:ca:cb:f5:d7:e3:06:dc:
a6:b3:3e:ef:30:15:6b:1e:8c:ce:03:1d:ac:e6:94:53:32:cb:
0c:77:33:01:25:bb:a0:1f:c6:2e:88:08:6e:f4:2f:0b:39:fd:
c6:aa:5e:bc:ab:56:e0:63:e9:f2:1a:64:62:4d:62:c9:3c:72:
0a:58:aa:76:fc:c7:47:ae:7d:be:1f:62:a2:3d:39:84:1a:5e:
99:18:f4:20:23:b1:69:92:b4:2a:49:e7:93:c1:4c:57:c8:e4:
72:07:7f:62:a2:46:1c:e4:b6:aa:ae:b2:42:44:8a:73:f1:64:
ba:4c:e9:eb:9a:f8:d6:e0:01:dd:fb:65:d8:15:61:a6:b8:3d:
16:3a:d8:3e:d6:13:2b:69:ff:e9:0d:7b:ae:22:f3:df:b3:e8:
bf:ce:6e:fe:72:68:9f:75:69:75:40:e2:cf:7e:ce:e6:9e:3f:
4b:c8:4c:03:6c:78:62:a9:a7:ea:fd:4e:0a:b5:c4:25:6e:a4:
1c:bd:c0:4d:bd:e1:10:83:6b:4d:c7:6e:6d:d0:9c:65:a1:07:
c4:3e:f4:71:93:ba:0a:b5:ec:c1:0d:9f:de:a9:48:d8:17:68:
c3:2c:98:2a:f2:49:02:ad:75:8e:01:45:0e:5d:f3:48:7d:99:
15:10:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:02 2025 by rpki-client