Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: su51LPusfzR588cyJv2zDCSBsGYxKg8/ToN6+NBOEHI=
Subject key identifier: 69:08:FA:B2:DD:BC:E9:31:B8:E3:B5:35:91:C6:CD:8F:63:53:3F:C6
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019873E2B60289E29FE8362BAC4221CB652D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0A25
Signing time: Mon 04 Aug 2025 07:01:34 +0000
Manifest this update: Mon 04 Aug 2025 07:01:34 +0000
Manifest next update: Tue 05 Aug 2025 07:01:34 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: y3WemBS6gBKBPnO+rBC+8oED2VxRsdQLtkWPo3NnL8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b6:02:89:e2:9f:e8:36:2b:ac:42:21:cb:65:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Aug 4 07:01:34 2025 GMT
Not After : Aug 5 07:01:34 2025 GMT
Subject: CN=6908fab2ddbce931b8e3b53591c6cd8f63533fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:e8:e3:ce:9b:fd:8b:fb:1d:15:f6:b3:77:
b2:b3:db:77:68:b7:23:f4:c1:d1:00:ad:1a:4e:2d:
78:6a:fd:db:0f:e7:ec:7d:2b:c3:50:68:54:1f:f2:
76:87:40:c9:8a:b4:7a:f2:3d:6a:29:92:55:84:db:
f0:07:1c:fb:f0:50:15:6b:61:91:0e:f5:5e:ac:c2:
27:3f:9b:2e:ba:3c:c5:8d:00:6e:1e:e5:7f:8c:ca:
41:92:e6:0b:5a:7e:bc:4c:48:00:76:c9:52:d4:6b:
f7:96:4f:69:55:f4:90:e5:28:3b:53:5a:d7:0e:57:
19:77:c0:0a:c5:b0:4f:43:1c:7d:01:65:e2:95:d8:
16:1e:63:a7:8c:53:69:8f:48:ec:05:61:73:c8:13:
bd:6a:61:d9:b7:ba:74:41:ee:4d:4d:52:a6:9c:8b:
0d:f7:95:1f:ae:4f:81:ad:bd:82:aa:b5:77:c7:25:
a8:3d:1e:a4:a3:a0:cf:f5:27:b5:d2:1d:bc:04:d5:
1e:eb:3d:a9:4a:f1:b6:96:f9:f5:2d:3f:6b:60:8e:
c2:4d:88:8c:09:ff:ff:d8:cb:49:11:24:e3:41:75:
92:d6:05:04:e0:fa:99:15:c2:81:bc:cc:30:6f:9b:
47:ad:8b:f4:9f:de:63:b3:3e:73:74:67:92:85:77:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:08:FA:B2:DD:BC:E9:31:B8:E3:B5:35:91:C6:CD:8F:63:53:3F:C6
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e4:25:64:6c:24:04:e0:bb:84:7e:a7:b1:69:96:39:5b:14:
93:1a:3a:ca:bf:4e:ce:b2:1a:0f:b5:2e:ac:ef:e0:90:20:e9:
c6:03:fd:8f:5e:e1:ab:5f:b8:0c:30:d1:9c:5f:d0:bc:d1:e5:
0c:ae:74:6f:8d:c2:53:11:c4:e4:37:1d:18:81:04:18:46:e4:
18:84:37:61:e9:ab:6e:0e:2c:5e:90:bb:81:a9:e9:fe:bd:c7:
78:85:27:8b:72:5e:45:16:a6:87:6f:35:8e:4f:fa:38:f0:ca:
39:ac:a7:b7:a4:23:d0:53:4f:f2:ba:5e:05:6c:19:09:8b:65:
39:f0:6c:c4:89:11:0c:e4:e6:1d:0c:9c:07:17:b7:4d:a3:72:
54:19:ca:eb:82:c5:ca:2a:eb:62:f1:4d:86:b8:70:d9:f2:bc:
5c:3d:c2:cd:fc:30:35:f7:e7:e7:b7:c6:8c:14:5a:da:7d:97:
b6:e2:e4:41:54:f8:1f:37:b1:e0:7c:ab:df:ef:9a:8a:bf:7c:
41:79:a0:13:d9:70:9f:d9:6c:98:c4:7e:66:5f:c3:01:c0:aa:
bd:8c:c3:eb:8e:fb:33:14:40:15:45:df:6a:75:34:7a:9e:90:
52:31:14:17:de:e3:fe:6b:6d:11:39:cf:2e:c0:43:0c:bf:91:
ec:29:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:07 2025 by rpki-client