Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: TottQwDHSzF9xa/LRKaQ4I4hh4b8VSDLrNTXjR+vjbA=
Subject key identifier: 3B:B8:57:32:92:30:6D:2D:00:A2:6B:50:76:3F:78:1F:09:21:39:F1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0198797CED4E3786B7F81024C08CCA1AF42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 14EB
Signing time: Tue 05 Aug 2025 09:08:06 +0000
Manifest this update: Tue 05 Aug 2025 09:08:06 +0000
Manifest next update: Wed 06 Aug 2025 09:08:06 +0000
Files and hashes: 1: IJG_JRq8zqVeP27DEEQlEOWiORs.roa (hash: KQiGsENOOusiUE4UCS33mYYGJOSPmGw08JsBGm2uPG4=)
2: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: mrCK3jOXoHpNWFf1KjgYEeF1bdSDr4cm6pGRfyKP2I4=)
3: LwkjvEoytDIijnjt9wX6TwwIk_c.roa (hash: lQk1+QIUNyVB7qsZpmJC8DI4AzBXPB7QhTZvs64rZNU=)
4: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
5: Y5VgL3YQq3sMUoMQDyo77IMKb4I.roa (hash: P7y9ytdD9+6l7QsRPyjyLviYFblH+BcxQM/qP00Sxek=)
6: ZxAsBDM9cuoyGobJXXvAaIAzrYo.roa (hash: SkB8cFJ0rd32rFH2M62gUtujCyjJXdgWVQ4tyxEgN0s=)
7: fFr9iLTpeFwvEgZdbYg57JE6jV0.roa (hash: fAs5Pw18Rp99A7SiwVTO8Wfp2uJC+wo1K+h1inNGD4U=)
8: fd2xHAmFqQheE7FNe9tQiCDz1Jg.roa (hash: a8q8mr9r17Mfl2XO4auErGCWFnO43pDXqgxu5lyQm8k=)
9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 09:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:7c:ed:4e:37:86:b7:f8:10:24:c0:8c:ca:1a:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Aug 5 09:08:06 2025 GMT
Not After : Aug 6 09:08:06 2025 GMT
Subject: CN=3bb8573292306d2d00a26b50763f781f092139f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:44:0b:ac:52:84:92:45:64:ea:ad:42:75:
21:00:51:a4:8f:24:14:db:ce:c1:0d:22:99:4a:8d:
21:0b:ee:b9:08:9d:35:ea:c9:3a:87:39:b4:f8:49:
8c:a9:b1:17:d5:6e:ce:2b:0c:94:32:23:0f:f0:ed:
7c:4e:24:1f:20:be:c6:55:69:ce:fc:7e:7b:37:ac:
42:62:4a:4d:09:86:1a:e7:4b:1e:23:9d:32:f9:e2:
6b:49:7c:c3:16:54:85:d3:1d:9b:d4:c9:27:66:21:
c8:c9:59:0d:0f:fd:e4:42:b3:b1:a7:5d:9b:8d:5e:
db:03:cf:11:a0:b5:2e:ed:20:f4:af:ef:86:ed:87:
b7:17:cb:61:74:b1:87:b1:38:e7:54:99:01:19:63:
96:d6:c4:0b:3e:30:3c:29:23:65:6a:bd:05:57:ce:
a1:7d:b5:c2:3e:67:31:08:ea:79:0f:1a:1d:5d:91:
94:9a:20:64:af:8b:2f:c7:23:69:dd:c0:d0:d6:19:
ee:e1:7f:2c:ff:49:ac:50:87:40:e1:cb:fa:a5:63:
6a:c7:f7:bd:5a:a2:a8:63:c4:46:d4:20:7a:9b:3a:
2c:68:01:bd:f3:19:e0:c9:6f:79:4f:34:2a:18:a8:
e3:02:d3:41:13:fa:1d:77:aa:30:82:59:a1:b2:aa:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:57:32:92:30:6D:2D:00:A2:6B:50:76:3F:78:1F:09:21:39:F1
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:c3:14:ff:2a:ce:38:ef:4b:ce:9f:a3:76:a0:a1:dd:4f:
6f:2e:f6:6b:6e:86:63:bc:3f:2e:ce:1a:2d:66:b6:19:54:c1:
f2:9e:a9:f2:0c:25:8c:a1:7a:dc:30:f3:42:01:85:81:10:95:
9d:c3:5b:b4:62:39:75:cb:33:f9:aa:f5:d9:9a:38:1e:5c:ce:
05:5e:78:67:0a:b3:da:67:bc:bd:ac:76:52:02:3a:42:a4:fc:
62:87:93:d8:30:f7:70:d0:d6:8a:49:3f:70:b5:29:2f:22:4c:
9f:b5:79:5a:c0:66:e6:17:97:af:1d:97:61:7d:51:86:02:0d:
16:d4:67:59:9f:2b:62:3a:57:09:b3:68:4f:5d:08:d4:19:64:
40:79:b2:65:f6:75:e2:a5:fb:94:87:99:2d:37:08:7f:62:e8:
ea:77:7b:52:6f:bc:35:d9:29:38:68:55:71:cf:3b:61:97:cc:
7b:8c:50:eb:5f:5f:c3:36:4c:b4:5d:84:5d:31:a6:4e:82:6c:
ed:13:60:46:d7:52:fd:57:cf:e7:44:97:11:c8:26:4a:ac:44:
30:1c:72:11:12:ad:bb:e9:93:5f:59:16:6a:2b:87:b3:fd:3b:
f1:6a:c4:e5:1f:3f:63:f0:e4:f4:bd:bb:2c:a7:cb:e8:a1:99:
e0:06:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:59 2025 by rpki-client