Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: z/FDp3nT6qk73tieU//n+axd6ty/a/mv6GD2mcaUDrU=
Subject key identifier: BF:FF:60:DF:27:BA:8C:B0:A2:41:D7:62:95:7C:9F:AE:B3:C8:AA:2A
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 01987D1C897397E6FDAB2CEF6465902570E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0451
Signing time: Wed 06 Aug 2025 02:01:18 +0000
Manifest this update: Wed 06 Aug 2025 02:01:18 +0000
Manifest next update: Thu 07 Aug 2025 02:01:18 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: haDYFYWeEAIV/dhIJEMzkLMVo8EJBkgCQR3THmIqMT4=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:89:73:97:e6:fd:ab:2c:ef:64:65:90:25:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Aug 6 02:01:18 2025 GMT
Not After : Aug 7 02:01:18 2025 GMT
Subject: CN=bfff60df27ba8cb0a241d762957c9faeb3c8aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:6f:b0:21:af:34:3d:e4:0a:28:2e:0b:19:
09:3a:e7:be:e5:03:ee:f6:41:21:2d:ff:8c:2f:54:
85:f6:a4:f8:d4:21:96:06:f3:21:ce:41:f8:6b:8b:
8a:e6:26:a6:00:24:f8:5d:ca:c1:39:98:8d:32:a3:
b0:fd:0d:ae:30:cd:fe:1c:b2:2b:79:a4:df:37:be:
30:ea:cb:be:4e:54:2e:b2:10:d1:55:17:b7:56:8b:
a0:a3:6e:2f:08:c7:24:ac:ce:c0:54:6e:4f:0f:8f:
86:7f:dd:b1:b0:34:cb:e3:46:6f:7f:e0:03:62:89:
dd:e8:41:6e:68:8f:f9:f8:e9:07:14:a6:1d:5e:e8:
6e:03:65:65:c1:11:b3:51:d1:48:56:c4:6b:c6:d6:
4b:2b:c2:86:16:34:59:d6:10:cb:00:0f:ea:8a:c0:
21:a4:33:9f:f3:d6:7d:7c:41:a5:0d:ac:60:61:33:
ce:aa:13:e4:f2:91:09:b1:79:49:35:21:c3:04:8a:
dd:41:d6:63:63:13:06:e5:26:ae:74:a0:86:39:36:
e5:ad:9c:3e:1d:d5:eb:3e:d6:96:a1:b3:38:0e:3d:
10:04:9c:b6:b8:9d:94:4a:dc:e6:e4:3a:13:4c:d4:
97:0e:d1:a7:be:d1:7d:38:78:d4:b9:54:3f:b7:c9:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:60:DF:27:BA:8C:B0:A2:41:D7:62:95:7C:9F:AE:B3:C8:AA:2A
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b7:d6:2c:50:a7:54:92:49:93:d1:74:f9:62:e2:c3:19:94:
7f:40:d0:5c:ea:12:44:87:04:be:bc:d0:6d:70:71:72:4e:7c:
47:1c:f3:ab:31:1e:61:c5:4e:b1:6c:56:4b:92:0d:31:6a:81:
88:bd:5a:11:b0:45:c3:55:9c:13:6d:6c:7e:8f:f0:f3:b2:f8:
c5:e2:cc:ec:97:98:21:08:17:85:50:5b:a9:21:e4:ec:fc:29:
09:cc:34:cf:4d:7b:39:b8:ce:1d:3b:72:64:57:a9:e0:a9:4c:
f1:3e:77:c9:28:40:65:d0:91:e6:0d:16:dc:a9:da:85:e1:64:
ca:22:d2:e4:d1:e1:88:61:6c:45:b0:d7:fc:b4:52:84:36:ba:
c6:37:e7:22:75:b8:9b:5c:66:98:d7:29:f9:4f:12:33:7c:2a:
ed:cd:29:28:4a:55:58:25:95:a0:72:c4:6b:01:5e:1a:52:29:
9e:c3:77:87:d1:26:cf:a2:d0:cf:35:7a:e0:5e:aa:db:59:91:
e9:be:c3:ab:98:1c:9f:aa:fa:63:1b:b9:9b:44:84:c4:35:75:
4f:54:40:e8:9d:81:19:46:90:49:3c:cd:7c:35:82:65:ce:ce:
6d:2c:8b:0d:03:7b:5d:9d:17:d9:0f:18:47:79:a0:e7:b4:4d:
79:cd:a7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:44 2025 by rpki-client