Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
File: JQou0RQnyhZIM4Ur1JydtT1j5js.mft (raw, json)
Hash identifier: ZMrV+IALs+5eWIujkJYh9IMUFu/w/e+9s82jjdzBkjQ=
Subject key identifier: F5:57:7B:C0:C6:60:77:31:C2:48:B9:0F:F6:93:D3:76:13:C1:85:1A
Authority key identifier: 25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
Certificate issuer: /CN=250a2ed11427ca164833852bd49c9db53d63e63b
Certificate serial: 01987ABFC8802D91E313D8E2FE1C99F6620B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
Manifest number: 01B7
Signing time: Tue 05 Aug 2025 15:00:45 +0000
Manifest this update: Tue 05 Aug 2025 15:00:45 +0000
Manifest next update: Wed 06 Aug 2025 15:00:45 +0000
Files and hashes: 1: JQou0RQnyhZIM4Ur1JydtT1j5js.crl (hash: je/QCB3Iq6mlMDz+s0au3aQyYzr5mSZ1gtP4GxI/thI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:c8:80:2d:91:e3:13:d8:e2:fe:1c:99:f6:62:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250a2ed11427ca164833852bd49c9db53d63e63b
Validity
Not Before: Aug 5 15:00:45 2025 GMT
Not After : Aug 6 15:00:45 2025 GMT
Subject: CN=f5577bc0c6607731c248b90ff693d37613c1851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:b9:fa:b6:48:0f:3f:5d:91:bb:69:63:65:
72:8e:2f:c1:84:c7:b7:c8:7b:fb:5a:e9:5d:d1:c9:
ac:e4:be:36:df:df:0b:7b:d3:f2:70:cf:ab:b7:12:
2d:d9:96:fb:26:bf:72:d5:72:60:78:f5:de:1a:77:
e2:17:8b:37:b6:06:90:fb:57:c2:bc:54:bb:5c:fa:
c9:ab:c0:7e:4d:3e:ec:aa:a1:43:1d:e8:d5:8b:34:
b2:43:68:ba:8c:cf:f0:c7:62:82:57:da:3c:64:42:
47:45:79:d1:f9:15:a8:f6:96:88:42:42:45:9d:2c:
3e:ef:4f:42:14:08:d5:14:00:db:98:fb:9a:85:ce:
a0:96:60:c0:04:7b:64:42:ce:38:8e:62:23:f0:7c:
90:a3:2c:a8:4d:05:ef:57:65:6d:65:9c:47:eb:34:
52:43:93:04:e6:f3:e7:69:9e:4e:6d:9f:79:7c:70:
b0:f7:77:e6:4d:66:8e:84:15:dd:3f:b6:a4:47:f1:
31:62:90:87:46:91:95:cd:9a:99:34:49:aa:d8:6c:
06:d5:c8:a1:13:da:27:81:52:a1:fc:47:8a:1d:1e:
4e:ad:b4:71:39:80:f3:b2:9e:ab:00:0e:a2:eb:e1:
52:c9:9c:31:2f:97:f4:06:7e:a4:70:07:a0:b0:b6:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:7B:C0:C6:60:77:31:C2:48:B9:0F:F6:93:D3:76:13:C1:85:1A
X509v3 Authority Key Identifier:
keyid:25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:15:8e:95:5c:bc:5d:3e:e4:41:3f:84:d6:0c:12:5f:99:88:
49:b8:16:8e:e5:05:81:02:69:d0:87:74:ce:2f:a9:05:e9:1a:
53:90:69:13:f2:14:0d:ea:be:73:71:7c:bf:a2:16:05:ad:cd:
77:8c:5c:56:90:eb:1f:a6:eb:f8:33:27:68:01:4b:fd:f3:f2:
ee:6c:f5:76:77:a6:e1:fb:38:e9:cb:60:a9:79:d4:ed:64:ad:
e3:b4:38:ea:62:92:f6:da:99:b4:1f:e3:31:13:53:9b:36:9b:
47:57:36:13:21:49:38:22:29:a2:45:9b:ad:f6:d9:08:d7:d2:
9d:6a:2c:f0:6b:69:5c:0b:e4:da:d5:eb:dd:03:cd:ff:57:ed:
fa:32:59:58:d5:4d:21:7a:69:f4:83:90:49:4a:95:fe:4a:79:
b9:ee:b2:13:5a:df:8c:b9:c0:28:0a:24:29:5c:88:c9:b0:e9:
e2:a6:79:ff:21:59:1d:78:89:dc:39:4b:c3:a5:e2:64:f1:b8:
3a:6f:36:27:2c:f4:3e:3b:a9:de:b7:9e:d7:f8:07:25:64:5e:
ec:a2:9a:b7:d4:f7:44:0e:53:0c:65:31:83:62:a8:d3:45:fb:
a9:31:30:f6:d9:7a:36:06:68:87:75:fd:49:02:1f:21:fa:75:
05:66:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:17 2025 by rpki-client