Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: G8MFRCIXGvHQ7aL04fmgyHeYhKMr0U6EhyEihs79Co0=
Subject key identifier: 0B:29:93:22:C8:13:71:0A:73:9D:7F:71:4D:62:90:77:4E:0C:43:74
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01993C1585644457196CDE7324787F7299C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 1551
Signing time: Fri 12 Sep 2025 04:01:07 +0000
Manifest this update: Fri 12 Sep 2025 04:01:07 +0000
Manifest next update: Sat 13 Sep 2025 04:01:07 +0000
Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=)
2: G_6VP_k1Ac7XsfwHZplzKNZshbU.roa (hash: 6XxctL37SggU5aHM9b07WCLQFXzsmmU2bsXFoQDbvLQ=)
3: IJG_JRq8zqVeP27DEEQlEOWiORs.roa (hash: KQiGsENOOusiUE4UCS33mYYGJOSPmGw08JsBGm2uPG4=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: aTj6MjBsZ1LBN0QhvYq5pFlnEYJXFgjOEAZSx0so78M=)
5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
6: ZxAsBDM9cuoyGobJXXvAaIAzrYo.roa (hash: SkB8cFJ0rd32rFH2M62gUtujCyjJXdgWVQ4tyxEgN0s=)
7: fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa (hash: a8q8mr9r17Mfl2XO4auErGCWFnO43pDXqgxu5lyQm8k=)
8: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=)
9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:15:85:64:44:57:19:6c:de:73:24:78:7f:72:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Sep 12 04:01:07 2025 GMT
Not After : Sep 13 04:01:07 2025 GMT
Subject: CN=0b299322c813710a739d7f714d6290774e0c4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:1e:17:82:32:0c:eb:41:42:a1:65:87:b2:
42:98:83:01:0e:9a:db:26:45:ac:93:d2:c6:3c:e7:
65:06:9d:2c:9f:c9:06:ba:2d:8f:f5:58:f7:d2:6e:
4a:6d:81:31:76:f7:74:08:58:62:b8:08:83:2b:03:
9f:63:f9:70:66:0b:3a:42:8c:11:84:08:bc:d4:19:
11:e0:82:ca:65:10:79:69:f7:04:e7:b1:a3:3c:9a:
08:05:43:9d:43:cd:d6:1d:e6:60:98:10:23:b6:11:
e8:d6:72:71:61:0e:34:88:1a:f7:f3:d2:05:f4:a9:
07:0b:28:a6:be:26:ee:d4:92:b5:25:2b:61:a9:ae:
d4:9a:84:13:da:9d:ac:4a:9d:30:09:ab:bf:54:f1:
5c:a3:63:96:31:48:bd:11:9c:3e:7f:0a:b7:12:57:
8b:b5:ad:c6:29:e6:bb:b5:08:2c:f2:cb:b2:dc:e9:
7e:7a:06:89:e9:0a:00:3d:f0:8f:08:e5:dd:bd:ed:
3f:e9:df:75:37:80:82:21:35:3f:2e:9e:dd:23:d3:
4e:b2:28:89:f4:e6:cf:58:68:b8:9d:4f:39:cf:70:
67:45:71:15:39:df:1f:b5:7c:58:4e:f2:0d:bb:db:
b8:46:d5:6a:14:e6:97:ac:cb:f8:32:ec:7c:4d:07:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:93:22:C8:13:71:0A:73:9D:7F:71:4D:62:90:77:4E:0C:43:74
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2d:11:24:8f:77:39:60:ff:c5:8e:48:77:d6:34:bc:aa:32:
a3:1f:f0:1d:d7:ef:42:94:9c:5c:cb:91:fe:99:ab:39:99:a2:
bc:f9:d1:8a:e9:a8:60:9c:65:c2:2a:66:1e:5f:51:b8:ba:d3:
a4:22:a5:44:41:c9:a0:36:87:aa:3e:04:2e:f9:9a:00:bc:f3:
3f:27:3b:c6:71:b0:6b:81:fd:b1:b7:be:48:86:be:75:14:bc:
bd:a1:53:49:38:df:31:4e:d9:0a:50:cc:7b:a9:09:3e:3b:9a:
25:c4:6b:bd:d2:2b:d1:88:02:41:35:3a:7b:f3:53:35:d3:7e:
da:54:65:27:59:74:f3:66:01:92:00:71:a9:77:67:05:4d:a6:
f2:ee:ee:ce:08:48:b1:e5:8e:0a:44:84:69:2a:74:93:37:f8:
9a:9f:f3:37:d1:8f:47:c3:c4:ef:a2:b3:b9:28:e6:fd:09:2b:
16:59:86:fb:f6:1a:22:5b:1e:18:15:84:c6:4b:21:13:9e:70:
6e:97:89:1a:1d:5c:12:7e:b8:ec:ad:cc:71:58:d7:05:44:e1:
0c:0b:05:b8:e3:ff:9f:97:85:f3:1e:48:2b:14:37:7c:ff:8a:
3e:91:0b:ea:db:df:a8:77:00:ba:8e:17:14:61:20:e6:66:44:
60:13:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 08:24:11 2025 by rpki-client