Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: +/ZwH2nrhe/XNbj+ZUIRcDzreZf6UIQ3YjJPiGbWvFE=
Subject key identifier: DD:07:F6:E8:7A:94:CA:F5:63:92:11:38:6B:02:6C:D4:6B:9A:60:77
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 01987E2EEE1630CE8B03372300AE5FED8150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 15AD
Signing time: Wed 06 Aug 2025 07:01:01 +0000
Manifest this update: Wed 06 Aug 2025 07:01:01 +0000
Manifest next update: Thu 07 Aug 2025 07:01:01 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: 00R1jNOjnp3VqB8rDuiYDVxiUEwFNdVe/cNQAUGV+J4=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:ee:16:30:ce:8b:03:37:23:00:ae:5f:ed:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Aug 6 07:01:01 2025 GMT
Not After : Aug 7 07:01:01 2025 GMT
Subject: CN=dd07f6e87a94caf5639211386b026cd46b9a6077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:af:c2:f2:c4:26:69:0c:32:2f:ea:3e:cb:
f4:1f:80:4c:c4:a3:2c:71:bd:59:a4:99:70:e2:ec:
fe:d1:2e:78:40:fe:b5:a3:d0:d8:ed:28:11:df:b4:
1d:aa:80:e3:26:67:6f:23:c9:39:54:4f:39:e9:74:
ad:7c:c8:31:1e:37:48:71:be:70:65:30:09:15:a1:
54:fe:c5:e3:7d:92:35:55:d4:45:a0:cc:a4:16:05:
10:22:34:8f:09:cf:02:d3:e1:e7:3e:6f:73:f6:15:
f6:f4:45:d9:9c:0f:98:fd:97:c4:39:15:a7:62:c5:
e2:25:29:17:14:39:1a:a4:ca:33:a0:3a:15:6f:94:
9e:cb:3f:ff:e3:cf:44:e8:7a:67:9a:11:89:95:2d:
3b:99:58:06:ae:21:52:30:65:f4:12:df:72:39:0a:
e4:6b:85:e4:1d:54:61:58:27:9a:1a:b8:4a:16:23:
eb:62:ae:8a:df:ce:f2:56:aa:0b:00:c1:1d:59:b9:
47:b7:51:76:51:fa:ab:40:a8:68:39:b1:29:21:b2:
7e:4e:e0:85:65:ea:77:81:6e:ef:03:ea:76:06:0c:
da:23:6d:56:93:f6:da:fd:2f:64:cf:12:0a:ba:42:
f8:77:fb:c1:fd:ab:1d:2b:22:10:0f:1d:ff:c4:13:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:F6:E8:7A:94:CA:F5:63:92:11:38:6B:02:6C:D4:6B:9A:60:77
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:e3:f3:27:ba:f9:e2:55:9f:19:14:b2:b4:14:63:c3:37:
90:da:04:69:b8:24:a4:24:cd:d3:19:4c:92:78:26:83:07:74:
6f:b4:0a:9f:89:38:ee:47:51:f7:39:26:56:bd:64:3a:1f:81:
92:e0:dc:a6:98:7e:aa:81:f1:df:95:5a:93:27:7e:59:77:9a:
bc:d6:71:99:68:d8:6d:fb:6a:8d:4e:60:d8:12:64:a3:75:5e:
c4:45:60:d8:27:39:d2:31:1d:bd:c1:eb:8f:e3:99:29:36:ae:
36:ad:b6:1d:73:cc:dc:48:ad:a2:57:c7:e8:0c:cf:9b:e4:da:
1e:65:bb:60:32:63:7c:4d:9b:a7:93:2a:91:b7:ff:3b:f5:d2:
e3:28:38:36:9a:e8:ae:01:37:2f:67:0b:bf:16:27:8a:2f:9d:
4b:6b:cd:86:01:94:bb:91:c9:33:2e:cd:c4:af:41:05:5c:f8:
60:a6:6e:db:b0:23:f7:09:20:bd:d9:72:39:32:d4:13:62:ed:
c1:2c:c6:0c:00:2b:ce:60:3a:3e:e0:e0:6a:2c:d5:f5:a6:a0:
1f:cd:5b:17:5a:85:14:29:69:49:a0:87:91:e7:39:c3:9d:af:
19:ae:19:db:69:cd:98:cc:51:d7:a5:92:20:32:43:84:c4:73:
4e:e8:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:41 2025 by rpki-client