Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: R5lYfrpeTQ9WKU842jXSl5M9Nt2wI1+8zIXzPy4z3OI=
Subject key identifier: 43:20:CC:33:54:FA:F3:06:C9:02:72:8B:69:B5:E8:15:0B:4C:C7:F4
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0199233159B6B4E387B767BDE9F710DB4BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:01:00 +0000
Manifest this update: Sun 07 Sep 2025 08:01:00 +0000
Manifest next update: Mon 08 Sep 2025 08:01:00 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: RQsyyLOT3qT2ssHvAUoldauuXbKm/LwrDYEhVyPovfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:59:b6:b4:e3:87:b7:67:bd:e9:f7:10:db:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Sep 7 08:01:00 2025 GMT
Not After : Sep 8 08:01:00 2025 GMT
Subject: CN=4320cc3354faf306c902728b69b5e8150b4cc7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:b8:4a:df:67:52:a4:75:06:14:1a:9e:3f:
bc:93:5b:61:7f:54:e3:07:62:6c:e8:91:fb:ba:60:
15:1f:92:cc:37:03:3a:df:4f:2f:20:23:46:fc:a8:
08:31:92:28:02:76:b0:9d:fa:98:4e:32:1d:9f:28:
f6:ad:8e:54:6b:41:27:c2:10:3d:af:fd:b5:86:e0:
7a:06:aa:68:12:8f:ef:2e:44:ab:96:23:63:ab:d8:
f0:89:6f:9f:9b:c1:b8:62:56:73:ea:01:0e:9f:c3:
55:38:24:3b:c9:bf:03:47:86:2a:a2:15:81:fc:4e:
d3:10:bb:c7:dc:a9:22:30:73:03:f9:f7:c6:de:d0:
2f:f2:7a:58:0b:f3:2f:1c:f0:69:37:eb:74:2e:12:
7f:91:20:52:fe:e7:de:52:91:45:53:21:4f:e9:f4:
81:4c:1b:dc:dd:5a:2f:f5:8b:dd:98:ee:60:4c:40:
8a:ec:95:0b:7f:27:f9:08:f2:d5:6c:7e:7d:25:82:
61:2a:7a:cf:ea:0c:02:70:f3:32:6a:03:1b:36:4d:
a3:5c:96:bb:59:54:db:9e:f4:1a:e2:54:b3:3f:d2:
a1:8e:89:53:36:84:18:c8:02:83:3d:f4:89:dc:ee:
89:00:b4:e5:e3:19:bd:5e:1d:e9:34:24:98:d3:d3:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:CC:33:54:FA:F3:06:C9:02:72:8B:69:B5:E8:15:0B:4C:C7:F4
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:60:32:02:e1:95:b7:b1:ff:6e:ff:95:b0:ce:e9:ed:79:
34:15:a4:0f:7a:b2:6b:d6:01:fc:17:b3:b1:58:b8:38:be:cb:
bb:f7:15:42:5a:46:68:a1:06:d0:40:5a:eb:90:c3:13:34:ce:
10:24:4a:23:7a:21:c7:c3:15:f3:1b:a5:4f:f5:92:67:bc:1a:
06:09:52:2f:5e:17:ff:89:c5:c0:d9:a6:46:c2:f5:04:14:45:
59:9a:83:93:18:c9:8c:67:af:3c:4b:d2:29:57:d5:17:71:8c:
8b:fd:4d:a8:1f:e3:1b:7d:29:44:98:3e:e7:dd:33:13:a9:20:
58:01:12:01:db:87:ca:2d:c6:dc:00:03:99:6d:3d:f2:17:38:
0c:87:1c:0c:01:29:2b:24:26:bb:eb:65:67:ed:5e:d4:a1:6f:
22:c0:c7:29:84:4d:4b:c2:c2:ac:26:55:c3:99:74:0c:4e:12:
1b:3a:ed:86:af:1f:4c:d4:d6:87:cc:94:19:56:f2:38:63:26:
f7:c4:09:60:34:8c:0c:1f:e8:b0:af:c9:51:35:a1:78:2b:6c:
a7:c7:64:e4:5c:a4:21:2e:ff:9c:9f:a0:a7:9c:ff:df:83:d2:
ec:d5:fc:5f:39:3a:1b:0d:18:2d:0b:d1:57:69:8d:44:88:2e:
db:0f:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:41 2025 by rpki-client