Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: ixAvacWw1cWS7NIyirRz2CoHREwHcXOYUBSPcvuNmOM=
Subject key identifier: E7:22:3F:A3:15:BE:BD:FF:CD:48:58:C0:CB:D3:42:ED:CE:7F:D4:42
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 0198801D9A93B44C34150D56C892E5E6D8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 033E
Signing time: Wed 06 Aug 2025 16:01:20 +0000
Manifest this update: Wed 06 Aug 2025 16:01:20 +0000
Manifest next update: Thu 07 Aug 2025 16:01:20 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: 1fNnUqvigMXB2KpKmjjpquVhFpVNFUUPT62pBNhQbAI=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:9a:93:b4:4c:34:15:0d:56:c8:92:e5:e6:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Aug 6 16:01:20 2025 GMT
Not After : Aug 7 16:01:20 2025 GMT
Subject: CN=e7223fa315bebdffcd4858c0cbd342edce7fd442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:8b:12:b7:d2:15:bc:93:7c:43:64:7e:d8:
b7:be:2a:cf:6f:a8:76:b3:94:2c:6c:52:70:d8:61:
b6:3a:a8:ab:6f:be:7d:49:ae:41:3a:3c:b1:51:cc:
9b:a0:ee:7e:6e:05:86:24:5e:c1:33:2c:77:fd:5f:
10:4f:79:fb:7d:19:bc:37:88:f3:67:d7:b5:be:34:
2f:3d:d2:7c:f3:76:9b:47:9f:27:d3:f4:5d:75:a8:
21:6e:81:6f:6d:76:a8:30:5d:b8:10:58:23:cc:da:
7e:2c:d0:77:33:c0:32:fd:33:fd:39:91:07:e9:91:
36:1f:f4:6d:fd:bb:ce:c0:82:db:9d:92:06:e2:2d:
32:28:ce:54:1d:c7:25:3c:54:5e:6b:fb:fe:2f:b3:
ca:22:3d:87:ad:57:67:76:e3:32:cb:53:0e:79:29:
53:4f:bc:ca:e1:16:2e:61:5a:26:25:57:e8:e7:8a:
af:4a:92:60:b5:1b:fc:36:07:46:16:a6:ca:d1:e8:
d7:bc:93:9a:a5:37:63:a4:2b:ad:32:96:c4:a6:64:
6f:ab:6b:cd:21:63:fb:fd:b7:3d:c1:6f:de:56:cd:
dc:af:e6:59:3f:06:de:9a:41:7d:8f:1b:4f:1c:b4:
4e:69:27:5d:04:13:fc:bc:3e:08:fa:c8:e5:75:f9:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:3F:A3:15:BE:BD:FF:CD:48:58:C0:CB:D3:42:ED:CE:7F:D4:42
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4d:68:44:0d:46:02:02:1f:2d:9b:44:af:6c:8a:aa:17:b2:
13:33:d4:8d:c2:63:e4:32:ef:60:80:96:de:25:93:09:f1:e4:
4a:3b:94:af:c5:18:d0:22:48:49:01:17:5f:ab:7a:96:3d:59:
33:db:b8:13:ec:e7:05:9d:58:83:84:67:43:9f:5a:bb:5e:21:
eb:b0:c4:b4:1e:13:ba:f8:ec:e1:8a:f7:6e:d4:6f:d9:dc:8f:
ca:28:1a:fb:7b:5d:6a:00:aa:42:31:b4:86:51:04:3a:6e:55:
9a:bd:8f:45:43:4e:25:66:da:96:c4:aa:10:81:4d:72:bf:83:
09:ab:0c:21:da:c7:36:df:a9:4d:11:8e:3d:09:9a:74:c1:e5:
43:0a:d8:29:4c:2d:cf:6e:06:a0:bf:49:79:6b:12:88:5f:06:
9d:3f:b4:cc:23:7e:5f:fb:af:c3:6f:6e:e4:07:84:45:b7:bd:
10:54:fd:df:8d:c6:f4:d4:4b:06:5d:65:fc:08:66:0d:6a:0b:
ce:3c:5f:a0:00:66:37:81:7e:89:ca:82:e6:be:db:a6:d3:b5:
7a:f5:f2:a1:1b:60:37:ea:4b:ae:89:dc:4b:58:47:01:f3:19:
7a:11:02:ed:d2:aa:a2:54:12:59:ce:9e:d0:65:68:5e:cc:29:
65:88:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:23:56 2025 by rpki-client