Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: 7JySnUWmg2+dQStH16boGvHQwcBheVJ+D+EOL6YZaxI=
Subject key identifier: 05:25:F8:62:49:62:6D:8F:63:4D:8C:F8:0D:37:F8:3A:F5:16:08:1D
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 01993424FBC13C9A7531D46EC3CF0E9AE40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0636
Signing time: Wed 10 Sep 2025 15:01:02 +0000
Manifest this update: Wed 10 Sep 2025 15:01:02 +0000
Manifest next update: Thu 11 Sep 2025 15:01:02 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: 5MlbxbRwiiyN9GRlrkj35ilxKJnGO73374WVDfLlxXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:fb:c1:3c:9a:75:31:d4:6e:c3:cf:0e:9a:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Sep 10 15:01:02 2025 GMT
Not After : Sep 11 15:01:02 2025 GMT
Subject: CN=0525f86249626d8f634d8cf80d37f83af516081d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:88:f3:1a:85:2d:98:8c:89:5f:ab:01:bd:4c:
bb:f1:d4:67:37:b7:f4:0d:7d:82:9f:01:8f:9f:02:
05:cb:db:02:7e:74:ae:b6:08:56:da:c8:37:0c:25:
9c:81:b3:9b:22:4b:66:28:74:a0:1c:2e:24:a0:de:
06:ea:de:8a:b0:4f:d7:de:e9:51:6d:75:a6:db:a6:
65:64:ff:7e:e9:8d:a8:a9:17:8a:17:bd:96:8c:44:
cd:f0:aa:56:ac:47:07:d9:37:0c:23:e1:0a:96:c7:
f4:35:11:4b:29:44:1d:af:55:ad:b2:6a:f5:d9:78:
53:a7:4b:5f:16:5f:7a:21:e8:38:28:27:0c:95:5b:
17:f4:ad:96:19:a0:72:cf:07:0d:0b:8b:79:c0:09:
81:57:77:05:49:2c:d8:74:1f:cc:e2:3d:bf:9c:2b:
ed:78:ad:28:43:2d:e3:60:3b:19:2b:f9:42:5b:4e:
a5:76:44:c8:43:3e:e4:df:2f:59:40:0c:28:70:59:
d0:1a:cb:06:f6:a3:b2:95:fc:41:5a:67:79:df:b6:
2f:78:50:7a:6e:51:99:a2:35:68:18:91:6b:41:0f:
90:61:c9:e4:ad:52:30:41:02:d8:3e:45:cb:d5:6a:
bb:b0:46:23:cf:4b:64:4c:ff:48:69:f6:1f:79:c0:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:F8:62:49:62:6D:8F:63:4D:8C:F8:0D:37:F8:3A:F5:16:08:1D
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:84:6a:99:cd:2f:3c:49:59:2b:78:a6:c9:20:66:aa:e3:d6:
78:e9:a6:8f:70:77:0d:aa:8c:a9:54:72:c9:61:2b:20:3e:a6:
c7:07:d8:38:8f:8e:6e:5a:fd:09:11:45:f5:d1:91:ef:80:d2:
22:94:f8:4b:fe:10:56:1c:9c:19:1e:89:73:00:f0:03:85:5a:
2e:ef:37:d0:20:6e:93:b9:f4:bc:76:13:79:6e:a3:71:dd:86:
46:f6:03:bb:72:a1:4d:c0:cd:65:f9:f0:ba:aa:1b:79:7a:aa:
89:76:77:d1:38:75:10:c7:ee:d3:a4:b7:7a:0a:62:95:04:cc:
46:07:82:22:b8:48:65:d0:8d:71:d9:2a:c4:79:60:1d:57:9b:
36:27:0e:81:3b:0c:9d:17:38:de:13:82:1a:fa:d4:c7:c0:86:
86:1e:9e:2b:e4:d6:ba:28:cb:10:a5:fa:51:b2:16:cd:b3:99:
74:ca:e2:8c:85:e9:ef:67:41:90:3f:e8:c2:9c:ae:b6:e7:fd:
82:a9:3e:85:15:9c:2b:b4:0d:af:f2:65:e8:ff:f9:35:e2:9b:
8a:b3:5e:55:0a:48:a2:89:85:2a:e2:62:79:38:19:26:68:a0:
a1:b0:0f:68:6c:c6:62:d8:34:d0:d1:35:75:fb:84:0c:06:1b:
8c:9a:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:08:40 2025 by rpki-client