Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: p2vEZ2QO3AZ6WDMPNamvD/DYhgN7dxE4c9eqJCArlAo=
Subject key identifier: 7B:8C:45:D2:E3:C1:33:FB:06:25:70:70:26:9D:C4:03:26:12:EE:16
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 0198936D706986C17241F79377A6D388CCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 1171
Signing time: Sun 10 Aug 2025 10:01:19 +0000
Manifest this update: Sun 10 Aug 2025 10:01:19 +0000
Manifest next update: Mon 11 Aug 2025 10:01:19 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: 32ZBNwuQjDrgzC3/ShBhWFmwq4JygG27vf6GbILsUoc=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:70:69:86:c1:72:41:f7:93:77:a6:d3:88:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Aug 10 10:01:19 2025 GMT
Not After : Aug 11 10:01:19 2025 GMT
Subject: CN=7b8c45d2e3c133fb06257070269dc4032612ee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:58:c4:64:4c:10:99:d3:c0:77:96:21:a8:
18:6d:ec:fc:3d:f2:35:58:dc:78:01:31:10:42:1e:
b0:06:32:31:5a:fd:ca:45:68:30:23:78:5f:0f:bf:
36:48:70:39:13:ed:90:9d:e3:29:dc:28:90:53:eb:
05:b5:6b:d6:3f:ca:6a:6a:06:86:94:72:a6:bc:51:
34:be:66:6b:10:0b:74:95:fa:44:3a:40:45:62:a5:
e9:f4:57:7c:1c:c2:b9:bf:e1:0a:cb:a4:55:0d:07:
97:02:1d:b4:81:7a:25:e4:71:6e:12:8f:00:e9:e6:
c6:e8:49:68:2b:ef:bb:cd:72:a3:d1:15:84:26:e5:
7e:e6:c6:13:99:aa:16:e6:d5:20:6b:5d:26:35:00:
07:3a:13:4e:f1:de:db:93:3a:0f:d5:33:95:2f:e1:
17:af:bf:06:e2:3a:a7:69:3f:16:20:4d:1a:7c:6f:
05:2a:7a:89:bd:76:46:c2:8d:e4:35:e9:07:ed:fd:
2e:78:b4:36:ba:55:f7:34:27:49:4b:ef:22:ad:08:
1b:16:aa:bd:89:82:3a:08:dd:48:ea:89:0a:24:20:
d1:2c:70:04:aa:07:7c:39:4e:61:1d:78:0e:a9:0a:
e0:c4:e4:42:84:82:70:49:df:98:d9:13:29:92:4b:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:45:D2:E3:C1:33:FB:06:25:70:70:26:9D:C4:03:26:12:EE:16
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:ce:99:02:b7:cf:13:5d:a2:b0:a9:24:75:7c:1f:2b:8a:
24:a8:22:91:0e:29:9d:6e:f5:13:1b:aa:1e:5b:b0:77:e6:c2:
43:df:45:56:c1:4c:b5:2f:ff:2e:0a:20:5f:4f:38:8f:08:7c:
bb:b7:b8:01:fb:66:63:d1:b1:3a:84:e9:2d:1b:72:20:a6:c2:
e4:d6:6c:d7:c7:bc:18:bd:a1:44:92:a7:80:21:0a:b5:c1:dc:
4e:84:34:4e:93:3e:b2:6e:ca:f6:fc:97:5e:e5:e4:0b:ce:5a:
38:bd:ff:82:7d:e8:dc:01:30:91:0c:bd:1f:ca:72:63:8c:30:
04:3d:f5:32:f7:10:d1:03:fd:74:89:60:83:c6:46:e1:a4:46:
dd:a0:d6:47:d3:b9:16:52:75:d6:88:72:c7:de:03:c4:82:ac:
d8:5f:b2:d3:20:b6:c7:1f:75:e8:94:cd:82:78:e0:37:da:b8:
2e:30:f2:68:21:01:17:75:53:a3:70:94:6d:ff:ab:b7:cb:b3:
05:6c:41:2e:01:8f:b3:14:9c:56:89:a1:40:f3:62:85:a0:f7:
6a:a1:3a:c7:0e:1d:6e:24:ca:27:f2:2e:5d:3f:dc:7d:53:65:
f5:b4:98:44:af:58:d6:16:f3:63:2c:74:e6:20:38:8d:bc:1f:
0f:b8:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:22 2025 by rpki-client