Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: VAd1bosDETKD9Tj2FonnRW2ciw4agRBDM296l1zW5Co=
Subject key identifier: 4D:2F:10:A5:DD:11:CA:75:93:E8:D0:2D:6C:85:FF:3B:C6:F3:B0:C2
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 01987ABFD0CDBEE399AC04BE3BAA6170F4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0CAF
Signing time: Tue 05 Aug 2025 15:00:47 +0000
Manifest this update: Tue 05 Aug 2025 15:00:47 +0000
Manifest next update: Wed 06 Aug 2025 15:00:47 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: EG6g6ZFxzwyHa5ku6nbCk1gAnFGL4Ea/sWFsip4KWEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:d0:cd:be:e3:99:ac:04:be:3b:aa:61:70:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Aug 5 15:00:47 2025 GMT
Not After : Aug 6 15:00:47 2025 GMT
Subject: CN=4d2f10a5dd11ca7593e8d02d6c85ff3bc6f3b0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:37:d3:cf:8b:9a:82:e0:b6:ab:df:e9:25:
41:ec:4a:26:76:bd:12:c8:96:ce:ee:3d:1c:be:d4:
a2:8e:c5:2a:da:54:10:61:12:1c:12:29:39:4a:68:
1b:03:8b:5b:6a:97:6a:33:ad:24:a4:7b:78:4b:7d:
e0:49:c9:67:5f:13:cb:3d:91:fb:50:9c:e0:b1:9a:
f0:e6:62:9a:e5:9b:c3:83:50:0e:96:c8:82:b9:3e:
74:3e:b5:c8:ce:43:2d:a3:ea:a6:a0:a0:10:01:90:
ad:2c:4b:01:66:84:bc:94:d8:fe:63:27:c8:33:a4:
62:5e:75:76:12:26:66:e9:f9:33:5d:d1:60:88:4c:
d7:13:c8:94:2d:28:77:3c:ab:97:61:bf:94:94:69:
1c:d1:12:a1:cb:fb:fa:a9:35:e0:d8:21:14:ed:8f:
3c:b5:7b:c2:65:bb:8c:31:b6:8c:97:46:c4:51:9e:
7a:15:d0:ca:58:6b:a7:a4:79:1f:6e:8d:61:48:f3:
17:2e:4f:97:87:27:69:70:39:c4:19:49:7e:e6:b1:
9d:6f:3a:a4:c0:71:19:5f:73:47:4b:59:c0:df:02:
ae:10:fb:6e:99:f4:f1:0c:12:e4:d0:8b:33:6c:d8:
6b:d9:21:e1:71:71:e7:33:70:3e:83:29:97:de:cd:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:10:A5:DD:11:CA:75:93:E8:D0:2D:6C:85:FF:3B:C6:F3:B0:C2
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:c3:32:2d:d9:7b:d9:f4:b3:c1:10:97:79:73:0f:ae:32:
00:bb:44:47:23:dc:6a:07:1f:9b:4d:c0:a8:38:38:85:9d:76:
f5:f1:ee:0e:a7:37:b0:86:c2:05:3b:61:d3:26:15:53:85:84:
00:8f:b6:9c:18:de:94:6d:48:b0:ff:b7:ab:dd:bc:86:aa:92:
5f:1d:87:24:af:7e:6d:45:69:20:23:7a:6a:99:e7:dd:e3:a3:
0e:a3:79:16:be:7a:8e:7f:53:46:86:24:c5:72:42:cf:5a:68:
c9:37:42:ec:f2:36:99:27:5c:07:dd:50:68:69:40:b8:d7:6f:
dd:f8:9a:36:7f:13:cc:a9:a1:d2:c6:7f:6c:d8:09:f2:79:9c:
c5:d9:67:59:82:e0:fd:8c:d5:3f:dc:0d:59:4d:f1:4b:12:5b:
d1:c9:8b:fd:10:78:65:ea:14:02:00:e9:71:05:fb:b0:b6:fe:
ab:5d:e0:aa:ac:52:e3:0c:f6:84:7c:a9:fd:30:26:95:75:42:
a1:c3:8b:5f:e0:d5:cf:b5:34:43:aa:77:94:d9:56:be:90:be:
63:f0:f9:3b:a8:98:a1:fe:c0:20:74:08:3d:50:7b:e4:89:0e:
8d:18:9a:20:2d:30:81:5c:a4:64:b0:90:71:e2:e4:52:c2:fd:
00:dc:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:33 2025 by rpki-client