Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 42u2FiADXm0Kp1WW8lPP3S32ziNv9JBvMQt57Go3UVY=
Subject key identifier: DF:4B:7D:CF:82:CA:E2:85:B7:D9:2E:89:84:5E:B0:7D:F9:93:44:90
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 01988FFDEA498F8A458826EC954BAA7A2A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0424
Signing time: Sat 09 Aug 2025 18:00:39 +0000
Manifest this update: Sat 09 Aug 2025 18:00:39 +0000
Manifest next update: Sun 10 Aug 2025 18:00:39 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: 6RVy7c290vvCFnjzYhutj0TkwPsibVHgdfEp3MEAkwo=)
2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:ea:49:8f:8a:45:88:26:ec:95:4b:aa:7a:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Aug 9 18:00:39 2025 GMT
Not After : Aug 10 18:00:39 2025 GMT
Subject: CN=df4b7dcf82cae285b7d92e89845eb07df9934490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:a4:03:be:07:da:12:c3:cc:d2:1f:bf:01:
df:96:0d:1d:1c:e1:32:dc:e3:7b:6b:ac:2d:b8:78:
99:71:0f:39:23:e7:97:20:58:a4:8c:d4:7d:f7:f8:
6a:15:48:93:9f:95:00:05:ad:4a:14:af:2c:1e:e7:
88:45:06:0e:e8:b5:0d:c8:69:88:ed:99:85:35:b9:
17:f1:59:de:e7:aa:96:25:6a:8e:da:7d:0f:f1:79:
59:3d:38:d7:5f:36:d4:0c:dd:ac:da:d5:cd:33:75:
27:32:ab:b3:15:8e:63:4a:1d:f5:84:14:bf:d5:82:
19:54:ce:f2:a4:9a:21:87:8a:8d:23:56:14:2d:52:
c6:f7:0e:c9:f3:a1:a1:ba:f2:cf:dd:78:f4:a2:e9:
09:84:af:72:42:36:a3:e0:f6:08:36:22:2a:8c:0f:
87:6e:52:8b:fe:25:12:d9:d8:11:35:ac:74:00:f2:
2b:9d:ad:e1:a9:3d:d3:50:05:db:52:9d:a7:b7:c5:
ea:1d:b2:0e:8d:85:b0:26:3a:d7:3c:50:ce:c5:aa:
b6:6e:ad:df:09:57:d7:5c:b2:ea:dd:a2:f4:93:0a:
9a:a7:76:31:18:f1:12:45:e2:31:4b:83:b8:9b:14:
ee:7e:ef:51:e9:7a:8b:a4:48:bd:2a:bf:05:92:45:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:7D:CF:82:CA:E2:85:B7:D9:2E:89:84:5E:B0:7D:F9:93:44:90
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3b:ea:f1:8c:1d:fc:75:97:0c:20:dc:ef:f9:e4:0b:0f:73:
63:fb:80:a7:ca:be:8c:fa:12:26:d3:20:1d:8e:83:51:6a:d6:
4e:73:b6:fd:a6:1d:14:c5:65:e2:f8:ca:fa:7b:16:7b:84:ca:
d8:f2:2c:80:ab:0b:44:9c:e8:44:84:04:e8:28:bc:89:9e:28:
d0:2a:b0:2b:b4:96:fd:9d:39:46:4c:5e:5c:cf:67:9e:6a:bb:
7a:59:c7:6c:22:f5:cc:bd:69:54:43:c5:e7:07:6e:eb:df:a5:
e8:87:d1:2c:5b:53:d8:b5:66:24:cb:35:d7:f3:12:00:5b:c9:
48:45:af:55:50:5a:7d:11:e3:0e:51:98:a0:e0:11:4f:5f:e7:
11:0d:52:b7:07:cd:74:71:ec:17:85:44:2c:f1:44:b6:e6:f6:
50:b4:78:76:ac:19:60:3c:66:5a:c6:eb:52:7f:81:e4:d2:f7:
59:dc:57:fb:be:c9:b1:51:8d:4d:e0:c3:93:4a:39:90:8e:fd:
9c:0e:ad:f5:4d:75:bc:ce:51:5b:b6:c0:5c:04:f5:a0:a7:a7:
a1:4f:b0:7e:a4:34:29:60:0a:5a:26:0d:7e:eb:43:df:30:23:
7b:09:13:21:3e:3c:5e:25:a4:48:16:05:fc:9d:5e:f0:ef:6d:
87:b9:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:33 2025 by rpki-client