
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: tg0b71f+pMmFD1rvNaGoFreJ5GRrPUuVkIUV8ESoXRk=
Subject key identifier: E6:0C:5A:5E:1D:F7:4B:25:B3:2C:60:06:95:B0:39:14:5C:15:4F:82
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 0198744FB83FF05792A80C8BDAD4C22D9507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0BEC
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: Gp9KPuI7X4r7C0MO5WRl9Xq4Z7h3ZeIMPV5blmNOFcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b8:3f:f0:57:92:a8:0c:8b:da:d4:c2:2d:95:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=e60c5a5e1df74b25b32c600695b039145c154f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:c5:aa:22:f9:0f:6d:24:2a:80:f8:e2:d1:
af:75:d6:a7:db:f4:4c:f1:e9:db:cd:b8:3a:84:8d:
79:19:44:96:51:86:0d:a2:39:43:52:67:2c:6f:7e:
2c:31:21:e8:8a:cd:9a:31:dc:a9:62:9f:84:32:d1:
12:44:d0:74:51:44:21:91:63:2d:1f:20:0b:80:1e:
ff:68:de:9c:f1:c2:cf:7c:b8:88:74:20:f5:69:67:
f2:46:1a:83:9c:b7:9e:6b:39:0e:88:df:75:f3:26:
d3:68:12:64:41:f0:f1:d2:f1:d3:3e:1c:75:47:b4:
ad:40:75:10:83:70:3a:fd:cb:69:c0:c9:ec:3a:42:
8d:8e:1c:1e:24:48:c7:7a:b4:75:f3:2b:d8:98:50:
5d:a1:ad:2c:5c:12:38:dd:55:f0:74:d7:c3:32:4c:
67:c0:cb:3c:5f:41:f6:51:a9:8e:2c:a8:0d:40:c8:
1c:cc:00:ec:92:34:46:34:3a:08:b8:24:8b:76:16:
16:7a:18:ad:b6:76:d8:48:37:ce:b7:76:ff:a5:6d:
ed:8d:07:33:f4:b9:dc:23:d0:7b:8c:df:0e:d6:88:
9b:1d:d4:c7:f2:2a:aa:aa:91:ce:15:ae:d9:aa:b6:
4d:b2:71:5a:16:34:b6:09:93:8a:ec:a1:43:86:00:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0C:5A:5E:1D:F7:4B:25:B3:2C:60:06:95:B0:39:14:5C:15:4F:82
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:df:91:ad:14:53:63:51:c2:73:cc:5e:3d:17:83:2d:2c:
f8:3c:61:3c:4f:1e:54:4b:a4:51:53:9c:63:0c:59:21:6c:8a:
ee:0d:17:3f:27:b0:29:ab:04:63:ff:42:9b:c1:49:4e:34:2f:
fb:1e:6b:6c:ab:47:f5:04:67:af:3d:ff:69:79:36:62:40:0a:
3a:da:d8:55:a2:83:aa:3a:5b:18:81:96:75:9f:0e:cd:eb:55:
47:78:32:ed:2d:50:96:c4:5e:68:ef:3d:0e:ac:e8:87:d7:6d:
7e:0d:da:aa:a9:7a:1d:81:39:68:15:c0:ae:db:18:9c:46:b1:
57:cc:05:2f:b4:40:7b:70:15:41:ed:be:c2:b4:09:df:49:a4:
df:ed:6b:1b:5c:86:20:ab:3a:a3:bc:b0:c4:88:a1:bb:df:3d:
f8:fa:ba:fb:98:cc:b6:4d:f2:bb:47:31:18:58:81:c5:cc:7e:
a2:6b:45:c1:02:b5:4b:70:a4:4e:cb:ad:0e:c6:be:2f:40:0e:
f1:dc:75:e3:b1:e1:56:77:c0:83:e6:8a:0a:96:fc:57:a4:64:
d5:aa:d8:5d:b8:02:bb:96:14:3a:33:a3:ab:4e:b4:4c:7f:8b:
26:63:73:3a:69:ec:e9:05:97:3e:9a:d9:2f:43:14:7c:0e:f7:
ea:62:80:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:54 2025 by rpki-client