Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: 6t6oj7aWIVERvg8blW9WcbLrPmUXuzXGo/oEXNTs3HE=
Subject key identifier: B7:D0:E9:0B:BC:E3:D3:4E:B0:BB:E0:EB:94:37:2F:95:78:7A:2E:61
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019873E266486D84BDEA10F5E92EE329FC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 1432
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: JBobJ69xy0lP/a/cjnqZCnGudpY9JcsHP8c+sW8aQNU=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:66:48:6d:84:bd:ea:10:f5:e9:2e:e3:29:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=b7d0e90bbce3d34eb0bbe0eb94372f95787a2e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:94:0c:2c:8d:e9:93:55:0f:00:b6:cb:89:
c7:8f:80:5c:81:64:f6:45:1e:48:9a:36:cd:fc:20:
1b:45:3b:cd:6d:87:83:bd:d5:aa:10:d8:ea:b6:0b:
ca:05:a5:9b:7a:4b:44:aa:df:9a:76:21:c8:10:96:
a8:cc:11:05:6b:a8:25:02:af:39:e9:0e:be:27:78:
55:b3:ad:46:4e:5a:29:dd:50:b3:31:d1:06:83:ce:
9d:a8:db:f4:94:e8:c8:9f:b8:de:a1:7f:e6:98:86:
f2:a3:1a:9b:f3:21:d9:f1:9f:c7:dd:a9:39:94:01:
ee:18:29:6f:8a:1f:5e:d1:0f:82:63:9c:ba:16:1a:
05:5b:2d:ff:4f:18:f1:73:da:ba:81:eb:da:d4:c1:
bf:e2:ad:b4:de:5c:ba:53:fb:60:fe:fd:7b:28:c2:
39:05:c5:b5:6a:aa:32:01:78:3d:d7:55:8b:f6:4f:
6f:f0:55:c2:16:29:91:67:59:92:f1:34:5c:cb:91:
08:20:6f:12:00:e3:0f:38:12:43:e0:3b:3d:33:34:
00:80:a9:99:4e:32:b7:b0:fb:24:be:3f:5c:d9:c5:
6a:37:07:2e:5f:91:d1:c9:22:34:b5:7f:46:65:89:
7f:d3:9b:6c:8b:0b:3f:2a:55:1a:7f:cc:94:48:fb:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:E9:0B:BC:E3:D3:4E:B0:BB:E0:EB:94:37:2F:95:78:7A:2E:61
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0a:30:43:56:3b:d4:9f:08:f9:80:01:b5:7c:f6:3e:1c:b6:
ec:2c:b0:c2:68:9e:b8:38:36:07:9f:4c:29:8f:e3:d4:04:3d:
31:ba:83:7b:b5:8e:88:dd:4d:37:21:7c:9a:ff:ca:49:43:27:
e5:52:f7:2c:a3:53:dd:81:23:4a:06:f5:29:fb:7c:83:ac:35:
b4:73:ae:ac:d6:ec:86:55:bd:ea:de:ca:7f:c7:f6:9d:e6:a1:
f3:c1:38:42:9b:e1:61:74:dc:42:6e:42:b7:c2:06:33:c3:ae:
f9:f0:34:f4:82:71:c0:23:4b:03:a0:ab:6e:3c:fb:5d:96:38:
2d:e2:56:0e:0a:df:73:aa:4d:36:7e:40:61:ba:ca:8d:fb:b9:
9e:f2:cf:3a:ff:a9:ac:cb:6f:89:5f:e4:66:6a:3f:c7:24:72:
87:00:fe:45:59:e6:cc:1d:32:cb:c6:f5:8d:68:b5:01:24:fb:
c7:2e:57:78:d4:c5:aa:05:46:38:49:3a:5b:79:a0:fa:6d:29:
74:22:73:9b:7a:11:71:b3:92:00:f3:84:42:ae:47:a0:78:ae:
e8:1e:4d:d4:25:8f:ba:da:7f:c3:bc:cb:d8:ff:b0:b0:d9:6b:
b8:1c:43:fd:ca:48:67:7a:bb:1d:7c:f9:37:98:69:b8:53:f1:
3b:c8:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:05 2025 by rpki-client