Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: 10HzMn+guNb5+zLoF9xKjwjJzsSMGUg+hlg9nIv+ceE=
Subject key identifier: 9F:91:E2:0A:1B:0B:EB:E9:37:4B:BD:28:D0:8F:49:31:9D:F1:96:4F
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 019849D33013D696D26B5F3328088E771BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0945
Signing time: Sun 27 Jul 2025 03:00:33 +0000
Manifest this update: Sun 27 Jul 2025 03:00:33 +0000
Manifest next update: Mon 28 Jul 2025 03:00:33 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: eW14UmPsF6mGEehPsH5hDQHYrCxNSXs9TVEmemkmoUY=)
2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:30:13:d6:96:d2:6b:5f:33:28:08:8e:77:1b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Jul 27 03:00:33 2025 GMT
Not After : Jul 28 03:00:33 2025 GMT
Subject: CN=9f91e20a1b0bebe9374bbd28d08f49319df1964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:aa:9e:87:e5:c0:ed:2d:5e:f0:14:77:6c:
64:0c:f5:96:af:93:66:7f:61:93:8c:d5:08:60:ee:
0f:c4:8e:1f:3f:d8:27:a8:e4:7e:3e:4f:1e:95:21:
9c:4c:cb:d6:e3:c6:8e:dc:e4:0c:14:e5:b0:cc:3a:
b7:fb:b2:f3:4a:95:0c:eb:d3:53:18:ed:31:dd:f6:
6e:e0:fb:4f:5d:e2:0e:68:af:c2:a4:13:be:cc:25:
ac:93:e1:02:1c:6f:00:a3:c9:dc:30:4b:1d:fe:f7:
df:cd:3e:7b:53:47:c3:83:73:cb:41:70:69:21:7e:
ae:b5:e4:88:e2:be:0d:aa:6a:58:11:1e:b0:40:3d:
45:d0:b2:77:89:7c:39:40:2c:b4:60:3a:ca:d0:8e:
b9:2a:f2:dd:93:f0:4b:07:7c:92:34:e1:38:11:b9:
03:a1:d4:e6:6b:21:bf:2d:19:9d:b4:6e:5f:ec:11:
76:66:96:1e:23:7d:ee:ad:1a:15:cd:8b:1f:81:ed:
67:98:d4:aa:97:bb:35:d0:7c:fa:ff:23:b9:84:b7:
78:58:ab:b4:82:a2:16:08:fb:36:8f:92:42:86:2c:
63:4a:8b:1d:91:ac:14:06:88:1c:a0:f3:f4:06:fa:
4f:31:83:0d:f3:eb:06:15:89:fb:dd:04:6d:b7:ca:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:E2:0A:1B:0B:EB:E9:37:4B:BD:28:D0:8F:49:31:9D:F1:96:4F
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:eb:9b:a1:da:e1:a8:bf:7c:9e:47:9f:a6:d7:1c:f7:cb:ad:
b1:98:7e:50:48:45:86:23:74:1a:bd:d2:24:fe:a3:25:3c:dc:
49:d8:f7:13:6a:f8:a5:fb:d2:eb:72:05:e2:fc:cc:b7:d3:0e:
10:43:41:08:b7:7b:f3:b7:c8:6a:ea:89:e0:52:4d:f3:2d:dd:
16:33:d2:a5:49:4a:e8:65:8e:38:41:cd:b1:07:35:8c:cf:9b:
dd:0e:de:63:32:e2:67:41:35:80:e3:54:61:55:e2:3a:92:9d:
01:9e:41:47:c5:d8:b8:26:72:93:d8:54:de:1e:b7:91:84:7c:
27:24:bf:fa:b4:f8:5a:19:e0:5e:70:53:8a:ee:8b:69:1b:04:
e5:0f:7f:fc:63:5a:67:0e:ae:75:26:69:a3:5f:99:0a:a2:c9:
b6:20:53:9d:72:45:29:b0:e3:7a:97:e0:80:5d:e2:97:87:74:
d4:1a:3d:03:39:32:ed:25:6b:5d:cd:de:dd:a5:b3:42:b0:3e:
7d:e3:c0:cb:fa:fa:cb:72:f3:9b:4f:6a:5c:f5:ac:87:bd:8f:
9a:be:8d:f8:fc:04:f4:8b:05:b5:51:e6:f6:e0:25:87:6b:35:
8e:e0:c1:39:e0:ec:70:e5:9e:49:5f:ca:44:3e:bc:06:48:86:
4b:80:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:17 2025 by rpki-client