Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: cv42rH6w2mh1k87OHV3GMphG1Go2xgIXD2ylv5LV2+o=
Subject key identifier: C6:84:CD:B4:46:01:51:86:7D:34:ED:4A:9A:62:48:EB:14:22:45:8C
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 0198763ED47CE71D490360CA4ECCC68D9154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 18:01:25 +0000
Manifest this update: Mon 04 Aug 2025 18:01:25 +0000
Manifest next update: Tue 05 Aug 2025 18:01:25 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: LWUZwXYJkQOpMtkVkfprsoS6zrNalSwXnM2QnOp+y3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:3e:d4:7c:e7:1d:49:03:60:ca:4e:cc:c6:8d:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Aug 4 18:01:25 2025 GMT
Not After : Aug 5 18:01:25 2025 GMT
Subject: CN=c684cdb4460151867d34ed4a9a6248eb1422458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:14:29:ed:c0:44:b9:b7:06:a9:40:7c:db:
1d:57:4b:a5:4f:b1:e7:39:3a:0b:ce:69:d1:d8:d1:
79:70:af:99:3b:ea:a6:cf:48:02:7d:46:33:47:a2:
01:55:d3:a6:0a:89:f8:37:1d:8f:36:39:d8:82:d8:
ee:d0:0b:77:b1:a3:22:84:fc:5f:c9:a6:cf:bc:a4:
30:35:59:4c:7d:82:14:a3:6c:2d:c2:60:8e:5a:6f:
28:04:b0:3e:3e:24:47:c2:a1:14:3d:fb:ad:fc:ea:
78:dc:ae:3d:84:7b:f7:a3:24:d3:bd:19:ea:71:8a:
23:1c:da:77:5a:02:19:18:8d:a2:d7:ca:df:25:fd:
f1:09:6a:3e:8d:a7:6d:26:39:4e:f6:5c:37:47:06:
f2:bc:3a:eb:ed:e6:f8:71:64:78:eb:3b:e5:5f:b1:
b7:12:d9:52:63:23:73:4b:52:d7:5b:9f:5e:01:f3:
9f:da:43:60:0b:1d:74:0f:72:a9:28:b7:3c:8e:b1:
aa:21:34:42:66:06:43:15:14:36:5c:90:da:21:24:
a1:b8:44:ec:81:c9:a3:22:9a:c6:d6:6a:24:7c:94:
da:c0:4c:83:85:74:14:4a:68:7d:de:ff:63:35:6a:
04:4d:0e:59:89:ce:11:89:9f:bf:d4:a0:14:c2:ab:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:CD:B4:46:01:51:86:7D:34:ED:4A:9A:62:48:EB:14:22:45:8C
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:1d:b7:6f:96:35:74:09:e0:b0:6d:41:b8:d9:51:ef:f5:
62:8a:d9:5b:97:1f:98:c4:ff:02:0d:3e:59:8e:3b:c4:e1:a0:
f0:c9:4d:a3:e9:3f:b8:29:d7:69:52:cb:e4:ff:55:e5:8f:40:
2d:2d:0f:4e:ca:69:e8:a5:f8:a0:56:6e:ad:9d:b2:b6:98:e5:
3f:be:e2:73:08:2e:79:57:95:11:51:71:c8:c6:4f:2e:c7:eb:
b4:64:93:f5:0d:a0:13:fd:88:28:b3:17:9e:19:8b:a9:03:ba:
20:dc:f9:00:b5:02:54:1a:b1:f4:61:06:86:c2:11:39:e6:60:
20:a1:fe:26:61:48:55:33:39:0c:aa:cc:6b:56:bc:07:45:22:
4d:a5:83:b8:59:01:42:a7:74:6f:38:b9:5e:53:6a:27:08:89:
58:7d:50:fc:b2:0f:4b:c1:9a:d0:22:81:36:d6:2a:42:df:34:
84:46:91:1e:85:86:e6:81:6c:3e:c9:67:36:3f:6a:28:f4:41:
ab:78:9f:23:6e:09:ef:75:4a:9b:1d:a2:b0:b3:a4:67:03:3f:
1e:e6:18:fe:05:8b:a7:03:1a:99:7e:08:63:b4:40:db:f4:b4:
52:a1:a7:90:53:25:72:83:65:7b:17:0e:9a:d1:ef:b1:aa:80:
b2:8c:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:35 2025 by rpki-client