Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: KvKPtUOim664cR4ycz4HN3U1QFZPy9Rb+oO/PwxBd8k=
Subject key identifier: D5:1A:3D:74:64:A0:12:F6:E9:A1:35:08:CD:C6:A5:4F:B6:A5:F3:D1
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019931C899FFE46A23ED71E982448D6D40B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 160A
Signing time: Wed 10 Sep 2025 04:00:54 +0000
Manifest this update: Wed 10 Sep 2025 04:00:54 +0000
Manifest next update: Thu 11 Sep 2025 04:00:54 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: /4d+Vk+11Sn8MKvgpwVXUB1pGs+k/A4LtAns+XvK5x0=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:99:ff:e4:6a:23:ed:71:e9:82:44:8d:6d:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Sep 10 04:00:54 2025 GMT
Not After : Sep 11 04:00:54 2025 GMT
Subject: CN=d51a3d7464a012f6e9a13508cdc6a54fb6a5f3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:bd:2e:da:fd:cc:68:c4:9e:47:69:d8:28:
e2:27:f1:26:f6:82:a8:d7:21:dc:38:30:98:22:cf:
9d:0f:41:2e:55:c3:d2:87:7f:c3:37:25:07:05:c9:
41:74:a5:e0:84:c0:d4:81:64:3d:5b:b9:c2:7a:47:
6e:81:5a:68:13:d5:7e:84:e8:90:6c:27:d1:c7:15:
bd:6b:04:d8:07:22:8b:b2:78:18:24:aa:52:83:98:
59:28:60:0d:f1:52:29:78:53:57:7f:f8:df:01:a8:
67:7b:c0:3d:b1:9f:ff:8f:30:fd:e2:f2:63:7f:1d:
07:eb:c0:60:f0:dc:79:bb:b9:8b:89:e3:ac:b1:d1:
01:c6:e9:1d:07:de:dd:bd:5b:68:06:d1:ef:b7:c8:
1d:37:fb:18:4f:a6:c9:f3:c3:30:cd:50:b2:a6:e8:
ba:6c:94:cd:b5:5e:2e:aa:37:08:4b:63:c9:72:b6:
11:a0:66:53:cc:3f:f6:6e:4a:cd:33:95:4c:a3:e2:
ea:0d:b9:b8:9f:14:88:d7:cb:9e:41:57:20:b9:e4:
9e:1b:77:d4:4a:c6:a6:7b:5e:09:7e:a9:bd:cc:1d:
ed:dc:d9:3e:e6:ae:b3:b0:37:f1:63:14:56:ef:03:
50:89:5e:7c:95:1c:d4:35:0d:cd:e3:ff:6e:18:b4:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:3D:74:64:A0:12:F6:E9:A1:35:08:CD:C6:A5:4F:B6:A5:F3:D1
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:2e:34:04:90:0e:30:15:86:8a:bb:11:ce:b9:b9:55:59:
f4:01:87:4d:bd:9b:fd:bc:d5:e3:9a:b2:9c:3d:b2:b2:5f:d6:
b2:17:34:73:5f:87:4a:5e:5c:8f:6e:80:43:03:dd:f1:71:d2:
c6:9e:1b:50:37:b7:00:25:0d:d3:d1:ce:59:32:4e:97:34:b2:
be:7b:de:3a:3e:31:f8:45:d9:06:cd:75:b9:b1:e3:9c:97:c4:
7f:5c:9b:85:ad:bb:db:e4:20:87:e5:8f:9e:36:97:da:e6:1e:
da:bc:54:af:52:4c:09:6a:34:24:75:98:14:5f:53:d6:10:58:
7e:5e:d2:ad:b5:93:b0:ad:3f:25:16:35:ed:c2:40:30:b5:3a:
b1:86:94:1e:6a:3a:b6:e3:cf:c7:73:82:5f:91:9c:6f:55:2f:
9f:ca:67:01:a2:df:12:6f:86:b0:74:11:92:83:93:96:f9:e1:
f0:69:5b:96:b8:5f:3a:4c:e5:af:87:9f:58:70:ca:17:b4:33:
bf:5a:25:c1:9c:88:8e:2d:fa:55:18:a9:24:fa:7e:50:1f:e7:
20:59:63:06:c5:03:08:43:cb:ac:d8:7b:63:31:2e:7b:e1:0d:
1e:8f:9e:ea:4e:3f:48:e9:02:90:39:03:d2:f5:32:3e:fb:58:
88:89:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:38:56 2025 by rpki-client