Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: /wAfykL+1WADm+77RZMmkIdMnn8MWNm69rJaEHAV2j4=
Subject key identifier: 62:8E:BE:EB:90:14:14:F6:D9:3E:D5:D7:E2:CC:52:A0:12:B0:3E:2D
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 019873E2EAD58BA5C44E5D092B00EDA6623C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 1489
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: xEMuauJvRtUQSVQo/NnmRhVWRM+xfXWPTxelKD0Or9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ea:d5:8b:a5:c4:4e:5d:09:2b:00:ed:a6:62:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=628ebeeb901414f6d93ed5d7e2cc52a012b03e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:1a:66:ee:43:a8:d9:05:91:4a:07:05:29:
7b:44:bf:1f:4e:34:0f:ff:ef:33:0d:40:ec:d8:ca:
b5:48:88:48:fd:c5:be:c6:dd:eb:1a:f1:e3:5a:80:
f4:f3:ea:a1:64:47:ca:f6:bc:64:42:2d:67:48:14:
3b:01:d4:68:11:f6:f7:ae:eb:2b:6c:db:06:1a:db:
9d:00:15:81:a1:b7:70:1f:ed:41:0e:47:32:9f:1d:
26:50:ce:dd:a1:dc:b7:6d:e9:05:86:e7:b3:d3:21:
87:e2:a6:bb:92:65:65:49:00:38:4a:88:ea:ae:c4:
fc:61:e6:17:17:23:1c:2b:b9:5e:57:15:0c:8a:1f:
37:6e:21:36:eb:27:c6:5c:2c:c2:dc:60:3e:2c:28:
91:ac:1d:5c:b0:e2:c5:18:0c:62:32:57:17:15:b6:
37:08:7f:a7:ea:08:87:39:88:ae:55:65:16:c1:ac:
c1:a6:96:92:b0:5e:6c:19:3b:0b:1c:f2:a5:87:1c:
ff:7c:2b:14:18:2d:c6:db:00:c9:ec:8a:ac:66:a4:
f2:b3:a1:6a:11:62:01:f1:e1:b1:7b:a0:ef:96:64:
71:ab:29:21:fc:be:d3:ea:44:10:10:3d:aa:2e:15:
8d:2e:47:aa:ef:48:0a:c9:42:b8:a8:d3:98:c6:91:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:BE:EB:90:14:14:F6:D9:3E:D5:D7:E2:CC:52:A0:12:B0:3E:2D
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:0c:2c:73:c5:61:01:e6:ee:fd:6e:b3:a1:7e:2e:31:e2:
0b:13:a4:d5:aa:c3:89:47:3f:9c:dc:f5:38:da:27:ee:77:07:
5c:41:1d:b9:90:37:6d:37:40:f2:e4:09:8e:06:f3:c6:5c:70:
30:70:64:9b:67:12:16:46:33:23:a6:a7:5e:eb:13:3b:9c:f9:
a9:2b:ed:ed:84:5a:ce:03:61:78:41:a3:80:58:ad:f4:53:4e:
41:a5:ed:18:07:7b:18:25:9a:e1:2a:df:92:05:56:b3:9e:ce:
3a:d7:55:80:5d:c7:81:66:30:67:9e:36:5c:96:c4:cc:93:5c:
9b:d9:a4:f3:15:89:b3:31:16:c8:c6:34:85:91:b3:02:88:3a:
58:1a:68:46:37:de:37:c0:a6:af:98:38:f6:18:d9:63:d6:49:
72:89:55:a5:3e:5b:7f:a7:e4:25:54:61:25:5c:35:fb:52:47:
60:81:46:a3:e3:fd:e3:6c:61:9c:ae:c2:ec:b0:a5:ad:9a:5e:
d7:49:b5:71:01:a5:56:5b:5a:e5:36:0a:d9:27:b9:bc:9f:20:
e0:ac:e7:12:6f:91:c0:de:62:69:43:ae:7a:3e:ad:e1:35:19:
ad:d8:0b:6a:89:a4:53:11:05:67:c4:b4:5c:56:1d:c5:1a:c7:
14:36:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:57 2025 by rpki-client