Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: j3aJjJwKs+iywCMFuqKGGGi1o0hsO0g1DW/BUDlUQJ4=
Subject key identifier: FA:EF:C7:BE:CC:AC:D4:6C:8B:45:B8:86:E0:21:44:A2:78:A0:EE:93
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 01987D8C00D1018899D20750CAB490ED03F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 04:03:03 +0000
Manifest this update: Wed 06 Aug 2025 04:03:03 +0000
Manifest next update: Thu 07 Aug 2025 04:03:03 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: GF/dDW7OD8TFAh5phF8W/QbxSLXd2IQISWDgEXB+EeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8c:00:d1:01:88:99:d2:07:50:ca:b4:90:ed:03:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Aug 6 04:03:03 2025 GMT
Not After : Aug 7 04:03:03 2025 GMT
Subject: CN=faefc7beccacd46c8b45b886e02144a278a0ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:1d:2a:4f:3a:ba:0c:27:50:46:c5:b3:9a:
10:3b:7f:02:63:16:7b:0b:93:32:d1:cc:a8:a5:2a:
d0:93:62:f6:04:e6:2b:b9:7d:48:4b:6d:2b:b5:a2:
67:a3:d0:7e:3b:87:f2:b7:94:f0:b0:ca:8d:26:f0:
f6:34:ac:88:c7:8d:f8:ed:2d:5c:d1:e4:01:c5:c1:
25:c5:d8:bb:9e:f5:11:aa:da:b5:32:1c:cc:53:5c:
f9:05:ab:9b:e1:1c:df:c1:76:8f:3b:52:5f:e0:3a:
d3:6e:a3:dd:0f:b2:46:ec:92:83:fc:d2:16:0e:cc:
5a:4a:48:0a:82:7c:03:a7:e3:70:97:a6:d1:c4:e1:
a6:1b:7b:0c:f0:db:60:7e:e7:4f:4c:0e:dc:3e:53:
db:01:91:87:86:8a:bc:94:8d:e2:ce:02:56:08:13:
2f:59:eb:a3:67:11:1a:95:12:ca:ef:f4:c6:04:22:
3c:45:70:7f:5b:c0:5b:2e:bd:a5:c4:d5:ad:0c:3c:
15:03:0f:54:3a:46:3f:3d:20:1e:42:ec:0d:a2:03:
48:05:e3:86:8d:71:56:84:7b:c5:79:ab:1c:bc:5d:
1a:b1:15:d9:1b:09:c4:8a:89:a4:1e:6f:cb:b7:ea:
52:d9:b4:bb:55:31:cc:53:18:12:30:a9:ed:e9:8d:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:C7:BE:CC:AC:D4:6C:8B:45:B8:86:E0:21:44:A2:78:A0:EE:93
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:c4:fe:53:1a:32:b4:48:96:ee:06:9d:b8:2f:36:7d:2a:
d8:32:c7:72:b0:b6:76:50:91:6a:5f:2a:98:6e:f2:d5:ff:d5:
a4:4c:b6:3f:fe:e5:99:7c:41:6c:1e:ca:8b:50:0d:4e:fa:e5:
7d:3e:a7:d9:35:b6:3f:1f:bd:fc:3b:8e:0e:65:aa:e1:0a:7d:
51:81:4a:af:d6:18:30:94:e8:b8:e4:b6:69:93:cb:48:f1:20:
2c:7e:f0:26:38:89:6f:17:0a:23:0a:bc:82:5d:c1:5e:c2:e9:
6d:39:65:ff:fe:5d:f2:1c:f0:70:58:75:ab:cf:7c:96:e0:e1:
f8:4e:eb:e5:6d:d0:7f:b8:79:f4:1c:ef:44:90:fa:b1:3f:8d:
68:a3:75:0f:9e:34:73:65:90:9f:4f:80:52:62:6b:29:81:05:
f7:a5:91:c4:36:c4:41:cd:aa:5f:32:a3:d4:94:cd:b5:74:13:
d1:95:c4:28:fb:f6:5f:81:32:b9:8e:14:a2:01:d5:71:3b:2c:
f5:15:9a:62:05:b1:3e:e7:49:53:a5:52:bd:0d:d1:2c:00:4d:
b6:95:3e:d3:89:b1:9c:5d:11:97:fe:ab:b2:74:24:a1:aa:ee:
76:f8:57:50:72:f5:91:9f:f8:79:e3:3d:bb:1d:be:bc:cd:dd:
97:9a:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:44 2025 by rpki-client