
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: azwUI7HLfQwL/381BVJpDqvDMHZssX98uNMIwoOq0gc=
Subject key identifier: 30:E5:D2:28:C7:D8:31:6E:E3:50:8D:D8:50:6E:53:CF:2C:65:0A:6E
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 0198790838E747C48EA53767913B4CB504BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 07:00:38 +0000
Manifest this update: Tue 05 Aug 2025 07:00:38 +0000
Manifest next update: Wed 06 Aug 2025 07:00:38 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: R5ufVCIjnE0y+CqB3hwn3qCGK26J5sqJOlVrwWqPVrM=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:38:e7:47:c4:8e:a5:37:67:91:3b:4c:b5:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Aug 5 07:00:38 2025 GMT
Not After : Aug 6 07:00:38 2025 GMT
Subject: CN=30e5d228c7d8316ee3508dd8506e53cf2c650a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:a7:e3:41:4b:a8:25:3d:5b:af:f8:a0:7d:
80:b0:15:bd:5e:5c:85:27:42:5b:57:25:ad:1f:39:
06:6d:ce:76:dd:86:d8:16:95:7e:42:51:64:77:0f:
c8:fa:33:f1:fc:5e:ea:cd:db:2a:ac:0a:34:af:e3:
ab:9c:04:c9:44:3f:be:1e:2c:26:f7:a1:9d:ef:57:
f0:c7:a8:25:fb:a9:45:ec:3e:be:7d:09:b7:70:e9:
4d:82:6d:06:2f:d2:8e:1a:20:a7:64:2a:cf:78:13:
5a:6d:ab:cf:0c:39:fb:ae:93:2d:7e:43:f4:4d:d5:
c3:c4:7b:a3:7d:2d:9c:a9:33:90:e4:c5:d3:5f:e0:
8d:3a:24:cb:cc:0a:fe:0b:8d:9c:ab:9d:dc:8e:8e:
7a:25:28:db:06:3d:b3:b4:e5:f5:47:b2:bd:70:64:
a8:42:10:ac:52:75:ec:88:d3:c1:69:a5:07:37:f0:
fd:2c:0b:4f:d5:8b:69:ab:23:4c:4d:82:81:05:04:
1d:eb:a8:d4:33:e1:5e:0f:75:9e:fe:c1:71:1f:88:
3d:c1:42:35:ad:52:9e:2d:5a:21:66:60:a7:99:e5:
b5:f5:bc:e0:be:59:5b:d4:fd:45:04:72:f4:08:8e:
13:8e:d4:8b:40:6c:02:a1:c8:c0:8f:82:60:bb:bb:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:D2:28:C7:D8:31:6E:E3:50:8D:D8:50:6E:53:CF:2C:65:0A:6E
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:c8:76:97:62:e4:87:29:c8:bd:aa:15:9f:76:e6:95:e2:
67:7d:68:ce:b8:2c:eb:6d:29:6a:1a:00:eb:65:92:19:76:d9:
9d:5d:f4:74:fd:a5:8d:55:7d:3f:2b:e1:46:d8:14:57:6e:54:
2d:f4:d8:c6:b3:3e:bd:4a:4b:d5:99:ee:7b:02:28:66:06:7e:
71:eb:fd:3c:43:a1:3b:e3:9d:92:58:74:12:08:4e:82:e5:71:
5c:76:88:5a:47:49:c5:ba:50:37:4d:04:09:e7:b7:52:d5:cc:
37:0b:14:9f:28:31:18:7e:6b:34:e1:5e:4d:f9:59:c5:e3:8e:
91:53:c8:d3:27:f1:8b:df:43:ce:81:82:b9:f4:d5:b6:9e:46:
1a:14:2f:17:d7:e3:e3:a9:17:51:05:a3:02:6c:29:8a:ae:ac:
52:b6:0a:6b:81:9d:16:62:39:82:3c:00:8a:5c:09:19:79:9f:
ba:b5:10:b1:a5:67:56:78:82:2c:b4:ed:6d:19:42:86:92:8a:
2b:91:6a:04:1d:74:2e:e8:29:6e:c5:49:1f:12:c9:0e:a8:57:
a3:19:7a:ea:f1:71:61:20:ba:3e:19:3b:73:7c:d8:06:a8:69:
a9:43:8c:85:d5:24:5f:14:48:06:cf:32:d0:13:45:ed:0b:72:
db:aa:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:30 2025 by rpki-client