Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: vKlzPJUTjOVtiv3LD1YPmzWip8kJK0s+kSL+osUUCMY=
Subject key identifier: 61:1D:DD:6D:46:A7:77:BA:DE:0F:BD:2B:70:CE:77:73:EB:EE:D9:44
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019882434AFB5662F42DEC86772F975BC969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 036D
Signing time: Thu 07 Aug 2025 02:01:44 +0000
Manifest this update: Thu 07 Aug 2025 02:01:44 +0000
Manifest next update: Fri 08 Aug 2025 02:01:44 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: OmFi2KjjkiE1gxLP+IK90awhgrfdzJbipzpiuTEaDUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:4a:fb:56:62:f4:2d:ec:86:77:2f:97:5b:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Aug 7 02:01:44 2025 GMT
Not After : Aug 8 02:01:44 2025 GMT
Subject: CN=611ddd6d46a777bade0fbd2b70ce7773ebeed944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:18:a7:5d:d8:86:91:41:0c:43:1e:31:87:
56:95:e4:8f:b5:ca:00:60:65:17:73:92:0e:83:77:
77:01:06:6b:87:f8:92:88:09:90:da:04:3c:84:9e:
78:ea:12:cd:87:63:ed:9e:d7:e3:40:1b:99:47:08:
7f:f1:44:a4:8f:2d:d9:5a:3c:73:63:96:0b:bc:e2:
cc:ab:13:7e:85:8e:ec:4d:64:f4:51:5e:53:ce:39:
f0:84:a6:5f:32:bc:4f:3f:f5:30:a1:cc:24:39:b5:
09:7a:6b:cf:77:27:78:d7:06:e7:fb:6e:90:5d:64:
6f:83:c7:27:cc:41:de:c0:ed:1e:85:cf:b8:53:cc:
78:6f:16:b0:63:8b:07:cb:56:27:a7:4e:d9:2d:df:
f7:92:26:5f:dc:18:71:29:c0:1f:5e:db:05:88:a3:
01:7d:7e:27:d5:db:ea:a3:ef:4d:48:74:08:02:0c:
45:91:95:69:4e:5e:a3:b1:18:a4:c4:6c:1e:70:72:
25:da:28:5f:86:56:26:ff:a6:4a:34:aa:a3:ed:bd:
f2:cd:27:46:bf:10:b5:05:0c:34:03:0b:4e:c6:d1:
73:62:98:35:10:a1:82:89:61:c3:76:0a:03:93:a3:
ef:5a:54:85:3e:99:17:d4:37:ca:01:6c:13:e3:d9:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:DD:6D:46:A7:77:BA:DE:0F:BD:2B:70:CE:77:73:EB:EE:D9:44
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:cc:34:71:4b:57:95:16:04:5c:3a:97:06:59:6b:7d:84:
85:73:47:46:c2:1a:a2:44:c8:e7:db:51:7e:1f:6a:5a:66:24:
1b:0a:0b:3d:16:00:c6:1c:74:26:71:6d:51:58:fc:9f:ba:24:
c5:de:cf:4b:5f:a4:09:cd:8f:ac:d4:67:b8:cd:df:7b:24:ea:
65:1c:48:7b:4a:e6:be:b0:c2:38:ef:19:5f:d4:e7:cf:c8:ed:
e5:87:2c:bc:bd:56:eb:e7:a3:8f:e0:f4:81:a2:c4:81:08:53:
6a:7d:84:e8:9d:15:da:f5:f9:4d:d5:1b:2f:14:dc:33:90:6a:
a9:a6:f4:ad:cf:cd:a4:02:51:ac:67:c2:80:90:f6:d8:b1:b6:
cc:52:f8:58:94:b8:b9:2f:95:c3:a3:29:7e:7b:33:ff:a8:a8:
3b:6a:1e:a0:98:80:fe:8a:de:c4:f4:60:b5:e1:3e:4c:7a:54:
9e:32:55:ec:09:c1:c2:f2:8f:13:f2:d3:7a:ab:ad:7c:ac:21:
f1:aa:36:62:88:f7:56:78:1b:1c:b8:2c:2e:e4:98:5f:86:11:
75:5b:82:f3:49:6a:f8:cb:64:50:88:55:1d:dc:a5:70:4e:b8:
01:93:63:e7:18:1d:21:29:51:25:c5:dd:2d:2e:06:36:1b:bf:
38:55:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:40 2025 by rpki-client