Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: uxaGd3BnVPfuqstn2m+gDF3xnqNQUVk0ofQWdB+tVNM=
Subject key identifier: 5E:A8:59:04:9A:93:62:BB:6F:75:61:72:ED:6B:37:DF:07:33:9A:98
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 0198744F9657AFD61CA47708922DC3BE9F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 09:00:29 +0000
Manifest this update: Mon 04 Aug 2025 09:00:29 +0000
Manifest next update: Tue 05 Aug 2025 09:00:29 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: /AHGEoXnbUsx8qYe/ubk18a7PW8kO3FBL3VlbKGhXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:96:57:af:d6:1c:a4:77:08:92:2d:c3:be:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Aug 4 09:00:29 2025 GMT
Not After : Aug 5 09:00:29 2025 GMT
Subject: CN=5ea859049a9362bb6f756172ed6b37df07339a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:1b:58:7e:28:ef:c3:53:d6:0b:7e:1d:cb:
70:1e:5f:bf:84:0e:ec:b6:25:b9:c1:c3:14:3d:46:
35:2b:e8:d1:93:ef:5c:fe:30:e7:ef:9c:2a:10:af:
e0:51:4e:3d:00:00:08:fd:8e:93:aa:95:a4:bb:fc:
a5:90:6e:5e:60:7b:55:e4:44:60:82:dd:08:99:74:
d1:89:1a:07:f6:66:c3:87:f8:1c:11:13:2e:58:18:
3f:50:a4:94:d6:2d:b9:06:1c:7e:87:72:e0:3f:50:
a4:8b:13:d5:11:9c:2e:25:b4:b0:3d:63:8e:9f:fc:
96:93:bc:fd:8c:c3:43:63:b1:a1:98:9e:ce:bb:58:
38:81:1c:49:1f:9e:1d:bf:7b:ea:52:34:4b:d4:a8:
a6:83:20:94:4c:6d:e2:1a:65:cf:33:7e:a2:24:fb:
15:24:d1:19:c5:e7:1d:f6:2d:01:f0:06:6d:c3:f5:
fa:ce:2b:00:bc:7b:05:d5:21:5e:4d:eb:0a:6f:6c:
a7:4f:b0:16:f5:0e:15:cb:e4:b1:5b:d2:bf:9c:55:
e9:ce:33:e8:40:c5:e5:f6:76:ec:78:6e:41:b8:83:
56:89:2e:0d:27:ec:80:a5:57:da:a9:df:c7:d4:65:
9e:ea:36:11:ad:93:a6:b6:86:ba:ba:56:2e:42:86:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:59:04:9A:93:62:BB:6F:75:61:72:ED:6B:37:DF:07:33:9A:98
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ca:b8:2d:10:33:fd:d0:55:6a:45:ec:df:64:4c:1f:20:1b:
2f:e2:ce:cd:f9:56:4b:93:00:ee:ad:40:23:ab:94:06:fd:c0:
d5:8d:33:6a:88:18:d0:84:8a:5d:5d:55:03:44:7b:63:59:f1:
6a:f2:ca:a7:33:9c:41:d0:f8:ed:bc:fa:42:1b:a2:e6:c4:ae:
29:28:bd:79:c4:58:a7:17:af:f3:21:cf:7e:0d:05:94:e3:21:
b7:da:2f:a0:1a:6a:cb:ee:63:9a:c0:e7:0b:5b:ad:1f:74:66:
9b:aa:e7:36:9e:e6:47:c0:37:a1:5a:cb:c3:8d:73:b0:32:65:
9f:b0:64:f3:49:63:2d:57:24:5e:78:42:46:c0:2e:3a:96:af:
b7:55:b0:37:bc:bb:bf:e8:04:c9:88:c7:c5:6f:e8:ba:bf:66:
fc:00:c0:25:91:9e:67:99:1f:18:1d:24:c5:33:bb:e9:23:1f:
09:1c:be:38:ba:ab:97:da:f6:1a:6a:67:ec:8b:73:5c:22:3b:
dc:e1:ae:d0:dd:19:df:f3:68:01:68:b2:10:e7:b5:a9:88:cc:
76:43:6d:7d:ce:a0:c2:19:54:c0:93:07:18:f8:fe:c3:96:3f:
6c:df:99:d0:23:be:0b:f0:3e:0d:5c:36:57:5d:67:87:2f:90:
99:64:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:48 2025 by rpki-client