Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: PQNUKM11AhlmLNWpGUvtENM2qKLEftzNjxRUmuc1R9s=
Subject key identifier: C0:38:5B:70:9B:21:E1:F8:F4:40:49:0D:56:6D:2B:3A:7F:FA:F7:32
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 019922FA499F5B675C4FF92C34745E07D9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: 5zYYcCPa85tasDie4eYmJzj53rDk2qPKpOz/cVPwTlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:49:9f:5b:67:5c:4f:f9:2c:34:74:5e:07:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=c0385b709b21e1f8f440490d566d2b3a7ffaf732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:bb:d4:2f:fa:5b:23:c8:15:0c:11:0b:b3:
66:df:29:e4:eb:1a:a8:4f:ac:c4:54:3c:99:55:b1:
63:4d:4e:28:bc:40:7a:35:ee:ac:53:c0:9b:60:d3:
19:28:45:d0:21:ea:30:60:56:1c:60:c7:9f:d4:c2:
fd:d5:d2:74:29:0c:b9:95:b0:90:02:9d:9d:04:35:
32:b5:fa:66:56:a9:97:4a:07:05:f3:d5:f9:f9:8b:
98:95:88:f8:29:38:ad:60:f0:38:e5:9c:e3:16:6a:
a9:00:3e:25:9a:32:8d:59:67:ca:8d:03:b8:5e:ae:
e4:07:25:59:02:a6:f3:e1:21:1d:02:17:6b:e7:20:
64:5a:59:d9:ed:05:31:cb:92:23:d9:85:d6:bc:26:
aa:eb:83:02:f1:a5:1c:09:9f:ec:0e:18:7b:8e:6c:
ed:9d:2d:ff:a9:55:3a:a8:a8:a4:bb:32:00:1e:24:
f6:c0:94:50:4f:c2:43:5f:37:e7:11:ce:a7:d5:e6:
87:0f:64:cb:3b:e8:7d:8f:35:93:55:c6:1a:27:6b:
e3:50:a1:3d:51:7e:bf:ff:12:6e:6e:54:59:56:93:
d8:05:0b:39:cb:04:3b:0d:dd:ab:9a:66:9c:b7:e2:
85:05:4b:34:76:a3:a2:4b:d1:3c:2e:04:2f:34:99:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:5B:70:9B:21:E1:F8:F4:40:49:0D:56:6D:2B:3A:7F:FA:F7:32
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:97:eb:fc:e1:75:ea:cf:87:f2:ec:a4:7e:b9:22:48:2a:
fe:b0:61:5b:70:b9:36:d0:cc:92:0a:5b:e5:43:d9:a8:15:0a:
1b:a5:c6:95:fc:39:4f:71:8c:82:eb:11:81:8d:7c:a3:ba:90:
d4:ff:34:98:80:96:b4:4a:64:28:eb:b7:4f:1a:d2:d5:58:27:
d2:10:6c:de:d5:46:b8:dd:fa:3a:a2:7f:ed:56:1b:54:99:8f:
ae:5c:34:d5:74:79:ce:6b:d6:bf:bd:43:fe:ac:56:0c:b1:88:
c4:de:ab:e5:18:73:40:96:24:4c:05:46:80:71:20:cf:c5:92:
e3:6a:57:e1:91:eb:68:7a:cc:f4:32:eb:1f:76:ec:08:ba:cd:
f2:5e:2f:66:1c:7a:56:7c:60:de:f6:2f:41:fc:c4:e8:16:03:
5c:c9:94:fe:49:b9:10:e9:39:82:9b:6b:f6:47:b4:49:c2:35:
ab:a5:ca:5a:80:1b:0f:8a:2e:5b:37:bc:45:2a:f4:1c:43:8e:
5c:c4:c4:8e:32:ec:77:48:0a:48:8e:c0:e5:ad:19:0b:99:fd:
a1:f6:d1:80:6b:4b:87:b2:36:d1:f3:fa:82:62:2a:98:c5:a3:
bd:b1:fe:62:b9:93:a0:ee:25:dd:c6:af:cf:e4:ad:96:31:91:
26:fe:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:29 2025 by rpki-client