Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: QDZcx500ZHlLXSwo/QAsogojNxJJEuJvzzNslVIB3rk=
Subject key identifier: 45:14:29:C9:F0:EB:29:2D:75:6F:35:38:F2:CE:97:87:65:49:9B:2D
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 0199372624FABE9AFDD39563475095242499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0D5D
Signing time: Thu 11 Sep 2025 05:01:10 +0000
Manifest this update: Thu 11 Sep 2025 05:01:10 +0000
Manifest next update: Fri 12 Sep 2025 05:01:10 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: 9wnam9M8du1BgPeEkHkjbEXrRiJKTPvDhzDexpbdm7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:24:fa:be:9a:fd:d3:95:63:47:50:95:24:24:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Sep 11 05:01:10 2025 GMT
Not After : Sep 12 05:01:10 2025 GMT
Subject: CN=451429c9f0eb292d756f3538f2ce978765499b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:1f:7e:5f:29:8b:d7:d3:28:03:40:08:c9:
6f:6b:b3:0a:07:1f:2f:fa:19:90:14:95:5e:45:87:
5a:71:2a:35:30:b5:7e:86:93:22:16:c3:67:91:87:
69:bb:19:ab:bb:99:97:84:1d:d0:13:d2:f0:e7:da:
4a:23:11:0c:30:b6:c3:e6:df:6a:4d:da:cc:5a:c4:
69:25:71:fb:7c:bf:6f:17:ba:93:dd:f6:1b:b6:55:
a1:06:71:ec:8d:65:ec:73:9d:e7:13:04:e8:36:d0:
1e:f9:84:36:1c:4b:79:a3:fd:1b:ea:8e:90:78:ba:
d7:e0:40:47:22:2c:8b:5e:fb:4d:32:b2:3b:b6:58:
2b:c7:96:c5:3b:da:7d:90:f8:80:0c:3b:9c:7a:99:
80:11:3d:07:5a:28:4b:f9:fd:d5:88:24:e1:0d:94:
65:c1:3c:a9:59:24:5c:d7:95:d0:3f:dc:e1:82:2c:
23:c7:0a:bc:f7:68:81:d5:ac:22:ff:18:af:3e:e6:
7d:f2:93:ad:7d:6d:d2:86:15:bb:97:01:da:16:73:
d6:44:7d:b0:d1:f8:64:c9:03:fe:48:f5:c0:fc:7d:
93:e7:94:a8:4f:69:ea:48:ff:63:80:43:38:a3:1c:
9b:46:a1:6b:3a:ca:86:49:9d:fd:a4:78:f9:e5:79:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:29:C9:F0:EB:29:2D:75:6F:35:38:F2:CE:97:87:65:49:9B:2D
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a6:4a:b6:0d:8f:bf:4c:1c:6e:b8:4d:57:89:9b:56:49:92:
0c:fd:a5:9c:3c:bc:3d:ca:4d:87:ad:b5:2d:e2:d7:40:3d:14:
7b:88:df:27:95:7c:1d:f3:e6:88:b6:8a:d6:ec:e4:2e:a2:98:
17:4b:ea:bc:2f:9a:67:ad:1e:b3:ac:cc:f3:64:aa:80:d8:2d:
09:25:52:ea:d1:16:64:b2:15:e9:03:93:da:76:00:f7:9a:24:
10:68:ee:45:de:59:5a:1d:c8:06:8d:b8:fa:29:cc:c4:87:54:
c7:8f:08:03:20:0a:78:1b:fa:7c:3c:88:f9:a9:aa:d5:e7:ca:
6b:26:d9:23:54:b0:65:ad:25:82:4e:f1:0c:38:e0:39:0f:10:
35:12:ca:25:ec:11:de:23:34:ee:36:a3:ea:a5:a6:b0:b8:cb:
fa:c8:7d:ec:66:3e:a3:1c:90:1b:34:c8:ea:34:b7:1c:cd:19:
03:5b:f0:7d:7e:b3:09:1f:d2:4b:af:9c:54:c4:1b:9b:35:bb:
78:7d:fa:a6:6f:a6:92:85:97:d2:51:7d:79:e8:60:52:9a:5f:
cd:7e:51:80:73:86:7f:cc:0c:0a:9b:40:ba:d0:1a:f5:03:e1:
82:2d:9b:5b:6a:23:20:f0:e7:93:2b:56:3e:86:4a:10:82:57:
b7:3f:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:43:34 2025 by rpki-client