Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: pysX0mQ/xt/K/OdhXDXOMMXfO2lOrEL0avaQVmlIQBg=
Subject key identifier: 57:16:EC:60:C2:87:A1:5F:F0:C9:51:63:85:99:4B:F0:4A:1C:22:59
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 01989411D650A2DDC3B1985E305CB5BBE996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 0907
Signing time: Sun 10 Aug 2025 13:00:53 +0000
Manifest this update: Sun 10 Aug 2025 13:00:53 +0000
Manifest next update: Mon 11 Aug 2025 13:00:53 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: bcuCi0SgxsMWIAuXhk0p+lx9HZp1YCjONfwgNgCnIpY=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:d6:50:a2:dd:c3:b1:98:5e:30:5c:b5:bb:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Aug 10 13:00:53 2025 GMT
Not After : Aug 11 13:00:53 2025 GMT
Subject: CN=5716ec60c287a15ff0c9516385994bf04a1c2259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:0b:ec:84:ff:92:63:9d:ec:83:fa:34:e0:
6c:48:07:df:5b:93:a2:25:bf:fc:e9:63:22:bc:f8:
84:f7:ee:4b:ff:1b:ee:3e:75:bf:7b:6b:d6:93:32:
1c:c6:48:d8:c3:a5:bc:30:81:20:90:a3:ee:f9:9c:
f9:22:8b:88:41:b9:1c:aa:9f:a1:6b:ef:cc:18:21:
99:f3:7d:99:98:63:b0:28:73:5b:f0:f4:97:8c:cc:
37:af:65:da:ba:39:50:59:ef:aa:a4:92:ba:e8:63:
e8:11:4f:e9:c9:4b:5d:76:a6:22:ab:0e:50:87:da:
e2:04:49:00:f7:62:cd:a6:75:81:f4:35:d2:2f:08:
a6:44:e1:04:61:7a:1e:8d:4e:b2:55:fc:ed:82:e9:
98:a6:56:3e:5f:78:0d:21:d2:e2:0e:b1:dc:24:a7:
8d:32:51:3d:3d:b5:4c:81:e4:0d:62:f5:e0:d1:20:
d2:4e:8a:67:aa:6d:f9:78:14:40:b0:6b:00:d8:ec:
68:fd:a5:6b:11:b1:62:e8:67:dc:f8:8c:0c:fd:08:
a8:86:3c:4a:a3:6f:13:b8:a2:18:3d:d8:4c:d8:96:
bc:f0:b1:b0:cf:74:04:d9:5d:5c:aa:2e:cf:eb:a4:
a6:d1:7e:14:dc:58:bb:12:ff:72:58:ab:e4:55:f9:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:EC:60:C2:87:A1:5F:F0:C9:51:63:85:99:4B:F0:4A:1C:22:59
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:75:91:2d:77:17:19:ff:a0:b1:e1:32:2c:33:13:92:f0:
bb:a2:40:60:5d:27:36:66:2f:ea:bc:64:85:64:3b:7d:d2:ec:
d0:95:e3:a3:4a:4c:f1:59:5d:61:d4:58:d6:42:6b:c4:7f:38:
14:7b:be:16:ce:2e:8c:da:be:49:b3:69:ed:e4:66:9f:eb:ed:
76:4c:90:df:ec:46:04:b4:37:85:c4:36:c1:9f:8d:f9:68:0d:
8e:b0:18:6e:ee:a3:df:fe:58:a8:c3:32:63:2a:3c:dd:4c:c3:
bd:b3:c8:0e:2f:d3:e3:58:e4:75:02:5e:05:69:89:94:d3:b4:
fa:ca:bb:93:89:bf:e6:90:8e:6b:80:11:03:e4:ef:94:2d:18:
e2:e6:7d:9e:ff:50:cf:ba:33:92:ac:63:58:2b:8a:96:de:b7:
47:62:32:32:4e:e6:a8:a7:23:64:57:81:fe:6d:9c:aa:17:5c:
b6:2e:1d:0d:da:77:19:e9:b8:ff:17:22:b3:b9:90:d6:4a:2c:
51:63:97:3a:88:3b:96:9e:15:fa:f6:81:64:b2:12:99:9d:89:
8c:be:9a:05:89:ae:ac:98:b8:be:d2:31:24:02:a6:cc:09:45:
c2:2d:13:fd:35:c1:94:b7:e2:64:d8:8f:09:26:30:f0:e1:c9:
bc:01:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:50:08 2025 by rpki-client