Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: BY7MmjbDIIsgpLbGTDpouOw6nUIs9SRRGFThYJplQqQ=
Subject key identifier: 70:39:C2:A6:92:1B:00:B8:0A:51:DA:18:F6:99:92:AB:01:B7:38:DF
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019832DDCFEF7A20785D9726323DE83F8A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 0316
Signing time: Tue 22 Jul 2025 16:00:54 +0000
Manifest this update: Tue 22 Jul 2025 16:00:54 +0000
Manifest next update: Wed 23 Jul 2025 16:00:54 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: ygcQoXNnaT0WzM9iOV2DUqpQDggXz5SvY+YMk1yiJBY=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:dd:cf:ef:7a:20:78:5d:97:26:32:3d:e8:3f:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Jul 22 16:00:54 2025 GMT
Not After : Jul 23 16:00:54 2025 GMT
Subject: CN=7039c2a6921b00b80a51da18f69992ab01b738df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:fd:e5:36:1f:a7:32:b8:15:3e:4d:4f:d0:
cb:eb:18:75:f6:63:d4:0f:49:0e:a5:d9:26:4b:6c:
10:d1:f1:49:35:07:a9:a6:66:9b:51:ca:0f:16:ad:
c1:df:89:fd:9c:55:ac:c7:4f:40:80:2c:80:3f:04:
4a:2d:9b:52:62:ac:de:0e:39:3d:a7:52:8b:98:b9:
0d:60:f9:9f:e1:a4:ad:4b:2c:d4:34:3c:11:a5:3f:
c5:17:83:b8:bb:99:e4:0c:31:9b:3a:8c:35:7f:b3:
52:ec:04:12:72:6b:14:d4:f2:2e:3f:d8:91:7b:f5:
05:5d:c1:fd:f9:27:fc:96:a6:0f:be:e8:47:98:e0:
6f:b8:14:21:ed:f0:cb:42:83:71:d9:87:33:c2:fa:
75:ac:22:22:a5:97:33:ec:a0:08:6f:c4:00:b8:b5:
df:9b:53:f8:d8:99:c3:0c:cc:1d:69:f8:0c:ea:9d:
bc:cf:bb:12:8e:a3:9e:01:4c:0b:2c:7b:d9:5f:51:
51:3f:89:d3:c8:81:88:c3:91:8d:8e:c4:0e:36:49:
bd:a3:6d:41:71:26:0b:5c:9e:30:ab:22:d1:45:05:
59:f2:e0:0e:63:c2:b5:eb:ed:ff:3b:cd:51:4d:94:
cd:cb:6a:5c:38:7d:29:92:61:b7:06:e9:c7:63:6f:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:C2:A6:92:1B:00:B8:0A:51:DA:18:F6:99:92:AB:01:B7:38:DF
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:de:8a:ff:3c:3a:2f:2e:8f:39:1c:87:34:8a:a1:e2:aa:77:
f0:88:b2:57:b3:bd:2f:a7:84:f4:17:34:f4:ed:0e:42:c0:22:
3d:18:38:c5:d4:eb:5e:11:c9:f5:1c:78:44:0b:3b:26:89:00:
8b:f1:10:47:62:7e:56:51:8e:60:cf:03:70:8d:2c:7d:33:bb:
07:a7:f0:f8:08:4c:41:51:3d:d5:c7:f2:4c:fa:19:f0:af:4b:
7b:43:65:f6:f2:ed:5a:16:68:e5:a4:b1:58:4a:44:2b:6c:3c:
40:1b:2b:70:d7:f1:86:37:b2:48:b5:c0:e6:f0:ba:2c:4c:e1:
ae:ab:d2:7c:0f:3c:ba:c3:33:e6:f0:c7:91:9f:e1:86:84:95:
eb:95:fc:21:e3:e1:82:52:dc:dd:67:f0:57:7a:10:8e:45:00:
13:1d:68:ad:81:8b:45:e9:47:93:44:50:3a:f0:e7:99:2d:ae:
d3:70:ff:47:cc:c1:e1:5d:a7:38:a1:95:e0:9b:05:53:8a:1f:
0b:c0:5b:f3:2c:39:81:a1:4c:2a:22:93:b5:29:8f:9b:c6:05:
9f:c2:78:06:2a:80:53:19:a1:9c:f7:00:f2:9d:34:86:6a:77:
08:75:2f:38:26:61:22:a8:20:b9:88:75:ff:cc:6e:94:e0:5b:
97:f9:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:53 2025 by rpki-client