
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: Va1O1kASxemwYuuB7GI4fkPGwBHUhiDrpBrn5dcje70=
Subject key identifier: 5A:EA:63:38:93:D5:BC:54:C3:59:21:C8:53:99:AE:75:56:CD:2D:82
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 019846D2654F06324D0470A062C909FB8A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 1292
Signing time: Sat 26 Jul 2025 13:00:50 +0000
Manifest this update: Sat 26 Jul 2025 13:00:50 +0000
Manifest next update: Sun 27 Jul 2025 13:00:50 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: e1spPouj8KOYg2c+ZQMi267vK0nUiSLhPlQmprWkYa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:65:4f:06:32:4d:04:70:a0:62:c9:09:fb:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Jul 26 13:00:50 2025 GMT
Not After : Jul 27 13:00:50 2025 GMT
Subject: CN=5aea633893d5bc54c35921c85399ae7556cd2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:41:a0:0a:74:17:65:69:c3:fb:1c:79:b7:
6e:74:fc:f7:d1:ea:d1:eb:07:13:8a:36:6a:db:af:
d3:e3:f8:60:3b:5d:87:84:84:af:e9:b8:e8:49:29:
6c:b4:f3:7c:f3:1e:ad:60:ed:48:42:80:e3:6c:64:
de:af:d9:80:37:28:53:e7:e3:f1:f1:d6:cd:46:76:
11:06:79:c8:1c:86:c2:dc:b9:dc:1b:c9:fd:5f:35:
60:0e:08:7b:06:63:fd:38:71:8e:c5:c5:d2:f2:d9:
cd:cd:83:42:71:f7:16:54:16:cc:62:1f:a7:20:47:
4c:52:3e:df:b0:8d:24:d3:36:f6:b2:f8:72:8b:89:
4b:e2:67:8e:96:06:18:d1:57:c3:5e:91:3e:09:ef:
9b:e2:eb:75:14:80:74:52:e3:b3:e2:72:94:28:9e:
69:37:be:36:3d:ab:12:40:0a:fc:9c:7d:60:d5:45:
fc:cb:31:6f:ee:8c:db:01:82:6a:72:79:59:6f:d1:
b6:dd:ca:be:1e:71:0e:d5:a2:e6:1e:5e:a8:d3:db:
db:48:35:4e:08:51:fd:70:5b:19:7f:65:f4:35:95:
ee:f8:0b:a2:43:1c:bd:36:df:fa:5a:5e:53:ed:d0:
bc:4f:5c:ac:d5:25:37:30:47:0a:07:5d:40:2f:04:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:63:38:93:D5:BC:54:C3:59:21:C8:53:99:AE:75:56:CD:2D:82
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:71:6b:ea:f7:85:a9:c8:b0:1e:87:7f:68:e8:2d:18:cd:
c9:1b:3a:08:83:73:89:4a:ba:b8:c7:c1:f0:d5:a9:18:2b:07:
37:eb:f3:68:cc:e8:1a:d4:df:d7:70:20:be:6b:41:91:ab:1e:
e3:8e:65:b7:6e:2b:cd:37:71:74:a3:36:72:62:e5:a3:34:90:
a8:24:05:dd:c8:32:3e:c1:37:ae:40:87:a7:02:6a:f1:de:92:
2f:a2:e6:29:00:ad:c1:fd:57:03:db:db:c2:6e:d2:cb:3d:9b:
d0:6f:ac:e5:93:6f:93:73:d3:79:3f:1d:ee:68:ba:40:ea:8e:
36:51:ac:0b:08:a7:cf:ef:d3:47:91:51:9d:68:b4:27:71:1d:
20:db:a0:d5:d2:59:30:76:b3:c2:44:7e:ff:7c:89:b3:33:7e:
67:01:2f:ed:ee:7f:da:32:44:d2:dc:bc:33:3c:21:81:f3:64:
3e:50:b2:07:a5:94:10:4f:ad:c1:ef:09:9f:cd:e4:fb:8b:14:
e4:5d:3b:8c:44:82:b7:da:45:ab:57:37:f6:f1:94:95:b6:1f:
b1:cb:2f:04:12:85:f8:01:b1:55:57:26:68:b3:a2:22:e8:69:
a1:f8:e3:0b:bb:db:a6:8f:4b:b8:97:f6:a6:d9:65:ab:26:98:
66:46:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:29 2025 by rpki-client