Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: d7jP6f3QB2fNDytuTLaKlOSmTLqekvWt6mEEX7HMD8A=
Subject key identifier: F3:1F:3D:1E:8F:51:21:A8:58:85:FF:37:0E:89:AE:71:2F:71:F8:7A
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0199288E2BC8084BFC17E509E973E75295C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0AEA
Signing time: Mon 08 Sep 2025 09:00:29 +0000
Manifest this update: Mon 08 Sep 2025 09:00:29 +0000
Manifest next update: Tue 09 Sep 2025 09:00:29 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: HzG0wK1R8P6Flsd8HV5swPfodW6P0+v3d6TIFsOmJ8Q=)
2: TYeQm-B0o6O_Gvpp8hOOtZ-gGJw.roa (hash: IdJGuhU17D6k4ubGV10TGtirgX+/WChDIAYbwSldd8g=)
3: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:2b:c8:08:4b:fc:17:e5:09:e9:73:e7:52:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Sep 8 09:00:29 2025 GMT
Not After : Sep 9 09:00:29 2025 GMT
Subject: CN=f31f3d1e8f5121a85885ff370e89ae712f71f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:52:fd:53:c3:e5:14:f3:ea:20:e0:ab:c0:
e2:50:5f:02:1c:7a:f0:d1:bb:da:2d:cb:31:67:b3:
27:60:c6:7c:04:b7:15:55:0f:f2:32:1d:11:6c:1e:
29:79:a9:ac:44:19:02:d8:46:83:ca:0b:63:e7:aa:
d2:3c:1c:7b:62:27:c2:a4:19:5f:a8:a6:7e:41:6f:
37:43:40:1f:0e:fe:fb:88:4a:3a:d6:0c:c1:88:67:
6d:cb:dd:4c:b9:f0:e8:69:c8:a9:48:9c:32:18:70:
26:7f:14:35:d7:ab:7a:51:8d:9b:6e:95:a5:29:6f:
2c:60:4e:b7:b7:7f:55:1a:2c:40:a3:e9:6b:7e:72:
1e:c6:92:7f:fa:4e:d6:0c:e2:a8:3d:17:f8:87:8c:
42:64:27:c9:8b:c2:37:a2:e4:3e:e3:64:cc:f1:97:
62:9c:94:af:cb:d6:c6:a7:38:10:44:4f:f7:7c:00:
71:b4:58:ff:dc:5b:05:2f:0c:ec:d7:55:81:3b:ba:
03:56:02:c8:7f:85:a4:ed:6f:fd:6c:84:36:a9:fb:
58:ac:b6:d6:b9:98:1e:9f:6b:65:bb:14:0e:ed:a8:
55:7a:f2:93:b4:85:a4:8b:e2:c5:b5:95:f8:95:ba:
2c:03:39:3f:d3:e1:c8:f3:7f:3b:df:0b:76:2a:f0:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1F:3D:1E:8F:51:21:A8:58:85:FF:37:0E:89:AE:71:2F:71:F8:7A
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:1e:86:2c:88:7c:27:18:e2:a5:81:be:13:ad:ca:b3:1d:
3d:45:3e:e8:40:de:0b:98:e5:1c:4d:33:5a:78:81:93:26:4f:
6a:65:98:77:4b:26:57:6f:75:12:7f:73:04:84:ac:38:1d:cf:
1f:0d:ed:54:48:96:c8:2d:65:14:cf:55:61:e4:f0:e0:75:29:
43:12:43:ea:de:5d:9c:39:87:72:c4:a7:a3:37:ab:9c:d5:fd:
9f:5e:7d:e6:14:41:76:2b:c0:01:54:ff:5c:03:19:36:7c:0d:
db:43:fc:52:2a:f4:9c:7a:cf:64:ed:cd:c8:1d:23:0b:93:82:
8b:20:27:94:1f:bd:af:63:6c:5f:4c:31:7d:88:d1:9e:eb:3a:
41:d2:49:36:31:89:ae:af:96:0a:9d:b4:05:c0:5a:05:b0:7f:
67:04:fa:42:8e:9b:85:ac:b0:e0:a4:41:71:bb:ee:07:31:82:
3d:1a:9c:6d:b8:02:f7:d9:0c:f4:66:03:2f:2b:65:c6:74:5c:
60:e1:99:b7:fd:1b:f3:1b:dd:eb:02:2d:54:da:dc:97:97:65:
be:3a:de:73:7c:b7:ac:c8:9a:8c:be:95:56:9c:d0:fd:d2:23:
18:da:ba:d5:91:0f:c6:fc:fc:e7:fa:2b:06:66:9f:81:b5:c2:
6e:a1:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:26 2025 by rpki-client