Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: JpxqclkuKLEDTH85rMvFZalkx1taIEgRvjRkkvHlnU8=
Subject key identifier: A3:91:90:4D:CB:D7:52:23:48:3C:78:3E:1A:4B:B4:FB:2F:E0:74:7C
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019889FBFCC11128373556B202F553A6A287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 14:00:49 +0000
Manifest this update: Fri 08 Aug 2025 14:00:49 +0000
Manifest next update: Sat 09 Aug 2025 14:00:49 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: 4uZSoKZPcAD3N/S+0KrNdsDbqFF7+R4htyJXApxPa34=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:fc:c1:11:28:37:35:56:b2:02:f5:53:a6:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Aug 8 14:00:49 2025 GMT
Not After : Aug 9 14:00:49 2025 GMT
Subject: CN=a391904dcbd75223483c783e1a4bb4fb2fe0747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:c8:90:c5:07:c2:74:82:7d:5f:c4:e3:db:
1d:be:11:6c:57:e4:f7:df:36:d0:42:c5:16:c1:a5:
4a:ee:7f:fc:a5:c6:db:d4:3d:af:df:88:50:b0:8f:
57:8a:b1:76:9b:ed:94:3b:5b:6d:d7:1e:99:04:a1:
54:9b:85:5f:f4:d2:50:8e:03:5f:2e:9b:af:2e:a4:
fa:9c:30:2d:25:bd:d6:29:71:aa:46:03:81:c2:ed:
6a:4f:85:b2:0c:51:18:75:1f:db:fb:54:7a:b9:38:
d9:7e:c1:5e:0d:1a:a6:a7:a8:ad:2c:f7:32:fe:0e:
8f:e0:9f:06:f1:25:9b:42:8d:c9:aa:66:2d:00:21:
b8:7b:d4:12:fe:df:f2:a3:52:41:d0:68:ac:cf:5a:
c6:ca:92:f0:37:e1:95:42:ca:6d:77:35:00:af:62:
8c:53:79:60:b2:bd:9b:07:2b:3e:70:4a:d2:ac:0d:
a4:76:5f:2c:eb:a0:db:f8:37:a3:d4:50:02:76:90:
f3:db:a3:29:98:59:c1:07:39:e8:d7:21:45:28:6e:
b8:2a:80:85:f4:5b:45:50:c9:0b:28:f9:55:60:65:
24:c9:1f:c3:15:e6:c1:6a:9e:8a:32:43:a6:73:e0:
68:7e:68:b2:cc:81:a8:e2:25:71:96:18:37:33:10:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:90:4D:CB:D7:52:23:48:3C:78:3E:1A:4B:B4:FB:2F:E0:74:7C
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d4:57:1b:12:33:69:f3:56:55:e2:e9:c0:14:fb:6b:46:e9:
1f:61:d4:6e:3a:e1:33:44:ce:d0:c7:f9:61:1d:1c:f8:90:0d:
77:e4:33:d5:dd:02:81:88:92:09:1c:07:ff:2c:53:00:12:80:
30:55:3f:2a:0f:5a:fe:92:1c:0b:a4:da:a2:d7:8e:3e:ef:34:
7b:9a:bc:b8:05:fc:19:c5:a6:0c:89:e3:f6:ed:56:04:11:79:
73:11:7c:cd:b8:49:3c:c3:7c:71:1a:b8:ef:93:68:b0:64:93:
c6:12:ff:43:ae:6c:4e:2c:62:a2:d5:c9:fe:b1:54:4c:67:e5:
45:ef:7a:00:86:1b:45:c4:f6:ed:96:a6:15:30:d4:df:f7:77:
12:84:71:7d:f4:12:e5:22:d8:1d:c9:ca:5a:50:67:cc:79:57:
a7:3d:62:42:08:03:47:ff:28:47:1d:f8:9d:6b:02:6a:1a:0d:
d2:17:9c:17:3b:c2:6f:b3:df:28:57:b6:cc:36:be:26:01:a5:
b6:c8:2d:9c:9a:0e:28:ef:d0:99:b7:82:e5:63:b8:54:99:52:
f2:51:2b:e5:8c:15:c1:dd:44:6d:56:e9:31:e0:b2:89:72:6d:
ae:52:7e:6f:05:0a:f0:9d:67:3e:29:22:99:be:fe:19:09:6a:
2a:68:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:51 2025 by rpki-client