Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: 4R5QAnT6+y3Be9CB4sz63MhlKufmlKnBGpF/FvYftg8=
Subject key identifier: AC:EB:63:B2:D7:46:6F:DC:2A:1B:80:DE:A1:BF:FA:F0:58:A5:D3:39
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019873E22CBE38A38215D3DE0EB4C0D9751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:00:59 +0000
Manifest this update: Mon 04 Aug 2025 07:00:59 +0000
Manifest next update: Tue 05 Aug 2025 07:00:59 +0000
Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 9CX4QE02OVRkCD1a/Yok2PieMljXTRp4tXc5/oo0uKo=)
4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2c:be:38:a3:82:15:d3:de:0e:b4:c0:d9:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Aug 4 07:00:59 2025 GMT
Not After : Aug 5 07:00:59 2025 GMT
Subject: CN=aceb63b2d7466fdc2a1b80dea1bffaf058a5d339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:a0:1b:7f:68:d5:56:64:65:ff:fe:1b:2f:
7a:6e:ec:5c:97:b0:f4:bd:2a:6c:ab:d9:80:b6:62:
7c:3d:29:13:12:51:27:fa:1a:80:2c:c5:76:c8:f8:
71:9d:a2:4a:b9:fa:49:72:3d:f4:93:0b:bd:c1:1d:
27:45:b4:37:e3:ce:5f:4e:db:69:6c:0a:e1:89:3e:
da:2f:58:87:8e:9b:d7:85:f9:68:70:b9:c6:26:4f:
40:e7:ca:31:df:37:45:bb:02:1a:ff:0d:8e:a0:05:
5f:db:c9:94:f5:8a:17:86:83:1a:4b:32:01:42:80:
ad:9f:ef:02:c4:c0:af:d8:42:3f:92:45:a2:ea:ed:
aa:6c:77:b1:27:b6:dc:f4:5c:9c:3c:05:a6:96:2f:
c6:0e:b6:9f:0c:ce:74:e3:3f:48:78:aa:72:22:f9:
cf:9f:68:ed:07:09:8a:e6:71:07:bf:6b:6e:8a:07:
a1:e6:c5:9d:34:dd:6e:5a:0f:b4:96:a1:14:8b:c2:
2f:23:8c:19:5d:6a:15:37:7d:b0:71:33:c3:85:67:
0f:95:0c:cf:3a:0e:70:11:9b:3e:0b:20:8f:f5:95:
9b:86:9c:4b:fb:16:f6:be:c1:88:bb:dd:c6:ea:c4:
62:4e:f0:b4:62:6b:1a:da:b9:f2:3c:67:70:92:c3:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:63:B2:D7:46:6F:DC:2A:1B:80:DE:A1:BF:FA:F0:58:A5:D3:39
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:02:69:66:6b:c3:ea:e7:1b:6f:2d:0a:00:11:82:8c:ca:
1a:59:9a:d0:96:ba:88:6b:22:35:3f:76:40:90:1f:3c:f9:0f:
e3:81:b2:c8:e9:bb:b3:f4:d9:37:5c:4f:a8:fc:de:29:6a:6b:
58:9c:5b:8d:2d:7b:c8:63:32:01:56:23:98:7d:20:0f:9e:b6:
3d:90:dd:1f:d8:d5:63:1b:e2:d6:3a:ff:71:98:da:2a:32:29:
5a:50:09:cb:9f:39:19:c6:77:51:17:79:ed:0c:4d:6f:6e:87:
2c:7c:60:28:9b:a3:cb:49:a6:c3:67:83:22:23:75:ea:c6:d3:
34:57:ed:7c:a3:90:da:f7:f7:f9:10:dc:e6:14:cc:cc:94:69:
c7:8d:a0:b4:cd:ba:8b:33:6d:58:28:33:d4:ae:55:c4:0a:aa:
24:68:33:2d:b3:7d:56:95:dd:84:a4:46:03:31:1d:97:50:22:
2e:d9:37:0d:ff:64:7b:ad:c6:27:9d:f9:72:a1:6b:4e:bf:2e:
b3:ea:42:66:33:06:bf:2e:2d:52:48:cd:b8:7b:55:fe:b4:7f:
97:89:88:ed:c7:d9:00:18:23:4e:3c:86:53:7d:18:53:ad:73:
e3:ad:89:82:41:47:bb:56:14:95:b7:22:11:3f:b9:f9:ab:b3:
9f:d4:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:56 2025 by rpki-client