Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: SLOdHFAGF0FRRZRT/lDv78h9TkINmSYgE4dIvfgXed4=
Subject key identifier: F0:CB:2D:37:B8:2D:0A:BD:BA:D2:2F:DC:A1:40:4A:09:2C:CA:4C:26
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019845894B09E0A4F1474EBCF1BAB284DA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 141A
Signing time: Sat 26 Jul 2025 07:01:21 +0000
Manifest this update: Sat 26 Jul 2025 07:01:21 +0000
Manifest next update: Sun 27 Jul 2025 07:01:21 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: bZ7wA+OGdgGIVlwi3nfC4hjgZ4FgWNAzZIDhSXkYmeA=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:4b:09:e0:a4:f1:47:4e:bc:f1:ba:b2:84:da:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Jul 26 07:01:21 2025 GMT
Not After : Jul 27 07:01:21 2025 GMT
Subject: CN=f0cb2d37b82d0abdbad22fdca1404a092cca4c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:f5:94:cb:69:5a:9d:04:84:10:6d:6a:40:
ab:aa:68:19:f2:0e:43:4f:f8:dd:e0:1e:01:46:a5:
8e:8b:b7:40:6b:34:fb:6c:bd:e7:97:3d:6d:a3:32:
8b:16:f2:df:ad:21:6c:b8:35:26:f2:e3:96:a2:22:
f4:96:1b:9b:0f:22:0d:8d:6a:b8:c5:0a:c3:49:1d:
37:56:e0:0c:52:7f:1c:3c:9c:93:31:77:52:90:3c:
d9:e7:18:7f:7e:8e:61:b6:7d:29:ff:fb:22:91:42:
84:1a:a6:5b:a4:58:90:41:01:02:5c:99:f9:0a:45:
9b:dc:4f:db:e6:7f:38:23:f2:29:ea:1e:45:83:ac:
de:51:89:9d:74:ac:ac:0d:f1:b7:89:dc:a8:75:e8:
45:1b:0b:41:34:fe:19:cd:0f:35:2d:7a:2a:c1:03:
1b:0e:9f:b1:14:04:4b:e3:4e:2c:8c:1f:3a:3e:70:
ea:86:b3:52:20:93:92:cf:44:fc:dc:4e:49:e2:89:
a7:e2:ca:aa:c0:56:52:7b:df:1a:8b:16:5c:8b:fc:
1a:c0:ad:f6:e1:10:78:4f:dc:7f:84:65:91:7d:bf:
c7:7a:90:f0:a5:8c:b9:8d:9c:8b:ee:9c:66:c1:bd:
31:47:3a:d8:e0:05:19:1e:ce:1c:0f:12:74:5a:e3:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:2D:37:B8:2D:0A:BD:BA:D2:2F:DC:A1:40:4A:09:2C:CA:4C:26
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0c:6c:16:b5:81:8a:37:0d:c0:de:f7:5b:20:4b:fa:a4:da:
61:3e:f6:5b:cc:56:e9:81:92:d7:01:9d:bf:33:c2:ac:52:f9:
0f:89:c4:0f:6a:c6:32:51:f2:27:e8:eb:07:96:70:b8:ec:f5:
a1:a4:98:72:a5:85:49:91:27:fa:75:d0:16:4e:04:9a:8d:a1:
48:0c:75:97:32:79:8f:67:f8:c8:df:41:30:7c:c8:40:ae:79:
ae:82:42:5c:c7:75:03:1c:36:5b:76:06:31:26:72:be:e3:73:
78:59:c6:80:71:ed:ea:c2:4f:bb:ac:9d:5f:42:1d:31:23:18:
0c:32:03:4b:b1:59:f8:8f:de:e9:c0:51:5c:4c:12:0f:4b:ae:
95:06:da:b3:58:51:3e:ff:a7:dc:36:e3:d7:e4:27:66:b1:71:
cf:12:08:c4:13:c8:d9:d3:15:7d:ff:d1:8a:03:d5:40:ed:38:
f0:4d:a1:60:2a:aa:3c:dd:62:f9:c3:b3:5a:91:b9:74:97:c4:
a3:9b:43:41:c1:e8:3f:b8:03:6d:66:39:b3:fb:70:3a:22:41:
cf:ae:58:23:96:bd:cd:73:86:ae:b1:98:13:06:30:84:12:bc:
e8:a8:71:fe:02:aa:cc:f5:18:74:6d:a2:2a:15:8d:c1:fa:67:
ab:91:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:38 2025 by rpki-client