Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: PgDwoSae6JiHZz7GAcpo768lWkAcyIqCVNReiOvuQaE=
Subject key identifier: 49:01:24:9E:03:2D:B3:B3:20:D1:73:04:51:86:1C:EA:65:25:B8:E2
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019873E239825CB1A9C05EEAF7732FEFE37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:02 +0000
Manifest this update: Mon 04 Aug 2025 07:01:02 +0000
Manifest next update: Tue 05 Aug 2025 07:01:02 +0000
Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: PzAUHd9wNzCcbGEC7mFqqE+yjvo9uVujkXxiZwX6DCI=)
2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:39:82:5c:b1:a9:c0:5e:ea:f7:73:2f:ef:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Aug 4 07:01:02 2025 GMT
Not After : Aug 5 07:01:02 2025 GMT
Subject: CN=4901249e032db3b320d1730451861cea6525b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:22:38:fb:e9:fe:b0:c5:af:5c:cc:4c:85:
91:0a:15:ff:e2:fa:b6:48:ee:17:c3:ee:e5:93:4e:
a8:68:b6:00:18:7b:69:05:09:95:93:00:75:b3:d8:
01:22:36:da:cc:ec:a4:35:76:85:7d:52:3e:84:8c:
15:a9:0f:01:e5:ce:c0:99:e7:e0:b2:e4:ec:4d:06:
94:9b:86:01:c8:3f:f1:d4:67:df:e4:ac:93:f8:3c:
18:3d:8e:3f:e9:16:11:c6:97:30:20:15:87:18:78:
50:21:c6:b8:f1:9f:a7:8a:a3:60:24:e4:05:5a:dd:
eb:ff:23:df:d9:aa:a6:23:c6:ee:97:b1:4d:5e:76:
b9:ec:a4:ca:bb:f5:1b:ab:9d:1d:45:c2:95:6e:89:
ed:f9:dd:c1:e5:04:ea:72:13:ad:41:38:1e:1e:91:
e5:51:11:c1:d3:36:a6:0f:4b:2e:1e:61:a2:19:24:
9a:b2:2a:4c:88:cf:81:ae:9b:4d:eb:03:be:cc:53:
76:cb:49:ee:92:1c:2b:32:70:4f:ef:7c:88:ce:39:
65:d3:c4:ff:ec:bb:16:cf:81:ff:45:13:72:fc:2b:
22:1f:d3:22:04:2a:60:2d:be:8f:90:42:88:89:9f:
29:31:ab:6b:44:41:54:e0:94:9b:ec:73:50:6a:a4:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:24:9E:03:2D:B3:B3:20:D1:73:04:51:86:1C:EA:65:25:B8:E2
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:18:08:5a:c4:64:c4:9c:44:45:b4:33:3e:4b:ad:fa:06:
80:2e:7f:43:2c:e6:0c:f3:84:8e:a7:85:19:31:7a:c8:ad:dd:
5e:fb:b5:03:da:df:9a:6f:87:4e:ce:07:81:28:ba:cd:13:8f:
12:49:ac:b0:98:6c:71:2d:c6:99:41:ab:db:3b:0f:09:11:72:
31:b0:20:e4:05:c8:2a:f9:08:83:67:85:5e:29:5b:b1:62:bd:
bd:bc:cc:b2:cb:28:e9:48:34:9d:34:f3:ae:6c:45:23:6a:c1:
89:99:db:6a:c2:3a:39:f4:52:71:80:f1:0f:c9:4b:81:c7:ec:
90:d1:ff:fc:20:65:64:55:61:16:4a:3e:07:a5:e2:9d:fc:16:
94:2c:12:82:a1:2c:62:71:a5:5e:42:68:06:89:48:c7:bd:da:
d3:0c:e2:71:c2:10:f0:db:02:7a:10:a0:21:10:0d:ea:c3:af:
d6:12:da:61:40:48:db:d0:8a:98:9c:64:01:e7:7a:7c:1a:cb:
a5:6a:d7:de:5e:1d:31:33:cd:da:57:43:df:e2:e0:00:bd:09:
a6:04:45:13:83:0a:fa:57:4d:f7:cb:6b:29:3c:a2:32:7c:e7:
69:c4:98:a5:07:0a:fc:d3:1e:6d:b2:e7:5c:b4:60:9b:59:66:
16:fe:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:56 2025 by rpki-client