Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: sfELQf8U2WnvpSj33+2/5cdU0X6+QNtWAZib25yXt2s=
Subject key identifier: 48:3C:32:C8:ED:9D:8F:CE:EE:17:5C:D5:21:4A:60:3F:BA:FE:F8:BB
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 01988CFDA27137FA8E763641D36E3EBAF85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 03F8
Signing time: Sat 09 Aug 2025 04:01:29 +0000
Manifest this update: Sat 09 Aug 2025 04:01:29 +0000
Manifest next update: Sun 10 Aug 2025 04:01:29 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: YNjOzlh1TUmZLrPHiNP4VvUazA86xqTN9tJ/A4Wetpw=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:a2:71:37:fa:8e:76:36:41:d3:6e:3e:ba:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Aug 9 04:01:29 2025 GMT
Not After : Aug 10 04:01:29 2025 GMT
Subject: CN=483c32c8ed9d8fceee175cd5214a603fbafef8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:42:a5:b6:7d:1d:61:12:03:08:74:84:6a:
0e:9c:ec:d3:97:28:16:9c:c4:de:d7:eb:3f:62:38:
b6:10:76:50:33:1f:28:cc:bf:15:75:46:df:0c:ac:
1f:29:cf:3f:67:65:19:2e:e5:2c:7c:9b:24:0f:8d:
18:14:2d:c9:0b:f2:28:07:cc:68:06:a3:5a:65:61:
48:42:08:af:4c:c3:0b:31:78:c0:0b:1a:06:42:e1:
4a:41:db:33:86:df:ad:a8:ea:32:33:5b:f8:5b:f3:
58:1e:79:e3:73:1e:a3:92:ae:85:62:a0:81:7a:83:
e0:a7:79:78:91:c1:82:03:29:32:f1:de:c2:5e:e0:
33:67:0c:78:24:54:fa:2d:76:9c:3a:f9:77:a9:d5:
7a:40:5a:52:0d:69:dd:76:f0:42:ef:02:a6:cd:53:
3e:47:45:8e:18:df:3e:5d:18:38:24:ac:90:6a:ed:
f9:11:3c:69:88:b6:cc:9b:81:c5:7a:c4:fc:9e:c9:
0e:ed:57:66:6f:8c:e2:7b:71:82:4d:ef:2e:64:7b:
96:83:23:23:9f:a9:c1:6c:fb:74:5b:8b:61:20:03:
ff:4c:cf:f1:9a:8f:ec:a0:20:23:bd:4e:f5:21:ea:
55:14:97:bb:bb:17:d1:b0:16:c5:e3:25:56:95:0b:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:32:C8:ED:9D:8F:CE:EE:17:5C:D5:21:4A:60:3F:BA:FE:F8:BB
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7a:35:01:4b:56:ea:19:4a:a3:2e:c1:ab:92:1f:c6:4f:9f:
74:b7:af:3c:42:c6:0b:4e:0c:19:41:fd:9f:5e:f3:03:84:33:
67:66:31:67:56:ac:bb:60:03:8f:f6:c6:f3:2f:6c:8a:9b:6e:
a8:f5:8a:90:09:14:85:c9:23:f4:0b:de:17:da:41:62:72:75:
c1:9a:48:a6:2e:12:0c:f8:c2:a8:91:d5:21:22:09:6b:cc:63:
62:43:74:7f:54:67:b3:22:55:25:c9:7b:28:46:44:a6:09:ed:
19:81:b4:82:9c:97:a6:ab:0c:b1:6b:bb:7f:18:11:38:5b:af:
73:20:18:e3:13:a8:28:0a:7e:2b:ac:55:de:ce:cc:40:de:32:
83:ac:9b:fa:6e:c9:94:04:d7:22:dd:0b:e6:88:a5:99:f9:24:
3d:97:c9:c7:6c:35:64:99:69:5c:de:98:9d:84:8c:58:54:ee:
d0:dd:2e:47:63:40:cb:58:40:db:0e:51:92:b8:0f:ae:ca:63:
38:2f:0b:3e:7f:0c:ea:0d:28:ad:b3:39:04:a6:e0:2b:e6:fd:
02:24:80:f1:ff:f4:00:31:23:45:d5:62:9b:e1:02:5f:b9:85:
b1:38:39:64:49:7a:8f:38:9b:6f:23:9b:28:29:fb:31:74:16:
77:da:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:19 2025 by rpki-client