Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: tCcWXZdbI6+PSB8nRL7/fJTAmz2uEAnmMhEdtR3dwHg=
Subject key identifier: 6A:40:CC:C0:DC:0D:81:20:63:D0:7A:2B:BB:B4:EB:A6:E3:2C:19:80
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019849D3C5A27DB5553CE26E103B5B6FF157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 112E
Signing time: Sun 27 Jul 2025 03:01:12 +0000
Manifest this update: Sun 27 Jul 2025 03:01:12 +0000
Manifest next update: Mon 28 Jul 2025 03:01:12 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: tVjOmnFJUvELyunExrJlR65SlI0ebfsMRLspgmW6Cio=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c5:a2:7d:b5:55:3c:e2:6e:10:3b:5b:6f:f1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Jul 27 03:01:12 2025 GMT
Not After : Jul 28 03:01:12 2025 GMT
Subject: CN=6a40ccc0dc0d812063d07a2bbbb4eba6e32c1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:a9:d3:36:c6:3f:b2:dd:f2:1f:a9:92:a8:
7e:5d:bf:e9:cf:cd:5e:8b:ff:a8:1c:92:38:48:6a:
25:b4:0e:dc:38:d2:9a:96:12:ca:f3:06:5e:d1:79:
dd:c8:ac:48:4d:e2:b5:e8:58:6a:14:50:76:d1:36:
68:7f:9e:f4:7d:00:39:99:7a:6e:44:7c:73:81:66:
d7:42:b1:d4:6e:d7:6e:53:a2:e8:31:5e:35:b3:41:
f3:98:9d:b6:7a:07:60:7f:5b:f3:ed:8d:98:f9:d5:
03:7c:9e:cc:01:b1:3a:39:09:1f:b7:e5:64:94:f8:
6d:5d:5a:a7:81:9c:49:34:ef:7c:00:6a:da:88:91:
44:78:95:dd:de:15:61:2f:08:cc:d3:60:b4:3f:80:
84:81:a3:9a:26:5c:6b:15:9d:c3:19:3e:22:3c:88:
b9:7d:eb:b3:3d:c1:5d:b3:ea:35:01:bc:65:92:1b:
69:8b:6c:ef:c4:a4:e0:e5:5e:7d:ac:e1:f4:88:08:
a7:7b:64:45:bc:8d:54:e4:7f:21:4b:29:db:b0:13:
0d:2f:e8:bf:05:a6:38:19:e7:8c:ee:03:de:36:ee:
c8:e4:a6:70:f6:be:3c:8c:dd:68:37:b5:63:08:1d:
c2:64:09:e7:3c:48:5f:db:5f:4b:8e:c1:42:9a:7a:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:40:CC:C0:DC:0D:81:20:63:D0:7A:2B:BB:B4:EB:A6:E3:2C:19:80
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f6:b8:64:f4:25:bd:64:dd:04:7c:bf:8b:dc:09:2d:97:5c:
64:7c:eb:d5:22:a0:4c:f2:03:9c:73:8a:0f:00:4e:f2:80:ca:
b7:57:dc:4e:c4:28:2f:8c:f1:f2:b2:75:bb:57:92:f4:23:33:
16:72:98:10:39:62:ad:7c:d5:74:f0:23:78:5c:29:c2:84:ec:
6b:11:35:36:e0:70:69:7b:87:60:72:ee:42:42:c3:0d:3c:00:
40:b7:7a:83:34:60:48:d8:93:bc:76:21:b8:3c:48:8f:cd:92:
9d:a2:0f:57:38:9a:99:b3:bb:84:3d:19:60:b1:f7:5e:f9:67:
18:ce:ea:83:29:10:48:2c:58:7c:3c:db:da:54:e8:77:2f:15:
0f:e2:33:79:24:e2:3e:ba:28:58:f5:82:88:18:9a:f2:3a:74:
76:4f:ba:50:49:02:88:ee:d0:29:7e:00:81:51:7c:88:65:4a:
10:b7:5d:c0:b1:5d:66:39:14:f3:f1:bf:8d:83:f6:bf:94:93:
4a:0b:48:ee:78:ed:b8:83:7f:50:cd:61:b6:ea:2b:fa:73:50:
22:11:98:38:1b:90:d0:fe:5a:96:f1:ad:21:9b:dc:77:47:df:
d6:17:49:4f:ed:61:1d:4f:60:ec:1f:e2:08:04:c8:5d:be:66:
94:66:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:16:53 2025 by rpki-client