Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: nq8GgGUgvu4KF1AVYP+NuPKwuXZ6pRuNibW1R0+yGY0=
Subject key identifier: 63:07:D8:0F:FD:2A:07:DB:14:81:E0:06:C1:F2:E1:61:23:21:83:76
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 0198439A22E607B3C02F7C23E069788B5D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 15FA
Signing time: Fri 25 Jul 2025 22:00:31 +0000
Manifest this update: Fri 25 Jul 2025 22:00:31 +0000
Manifest next update: Sat 26 Jul 2025 22:00:31 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: KOH1Db8ZrgWTdDcPA6IIByKJeJJvFacm6lm9y3lBdIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:22:e6:07:b3:c0:2f:7c:23:e0:69:78:8b:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jul 25 22:00:31 2025 GMT
Not After : Jul 26 22:00:31 2025 GMT
Subject: CN=6307d80ffd2a07db1481e006c1f2e16123218376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:7d:fb:00:19:be:08:52:0c:af:fd:d7:13:
4d:15:01:c0:7d:48:64:47:65:10:18:f5:23:47:6b:
b9:99:a6:d1:0b:d0:09:2e:8a:9a:3a:ed:35:cd:84:
6f:ed:c3:34:d5:4a:38:5b:83:60:e7:33:66:3a:3c:
0c:79:17:b6:ce:ea:1e:34:09:44:a8:4c:98:7f:3f:
28:b3:4c:bd:47:8e:3f:09:af:f5:9c:ba:1c:87:57:
82:1c:34:2a:a4:e3:3b:aa:18:5e:02:b8:68:89:0f:
7c:41:7e:14:f4:d8:8f:30:ad:c7:90:e3:14:30:ab:
c1:1b:b9:09:6e:e4:39:d2:af:d2:f0:bd:62:01:4e:
67:97:2d:6e:c6:ad:01:2d:36:a2:41:85:a6:8b:34:
2d:4e:de:65:e7:1b:78:2b:46:af:b3:bc:8d:3b:03:
f6:2f:78:2e:2e:f8:2d:70:c0:f6:9b:d8:0f:cb:e5:
c5:3a:ec:9c:5b:c4:a4:3f:cf:bf:e3:3c:7d:d9:47:
d3:d7:4f:da:89:1d:6c:7d:74:80:ee:f6:2c:11:eb:
40:01:69:46:87:84:36:b4:ad:28:1a:48:b1:bb:b6:
a0:05:d5:34:15:bb:3a:b9:a4:aa:ed:09:ad:6c:d4:
b9:dc:28:e6:37:96:2f:d3:28:1f:4f:f6:91:9d:36:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:D8:0F:FD:2A:07:DB:14:81:E0:06:C1:F2:E1:61:23:21:83:76
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:18:63:61:cb:de:ca:16:11:e1:f8:f8:df:25:e2:e3:0b:a7:
82:0e:9e:f3:f6:a2:bf:21:3c:18:18:71:b1:e3:74:bd:ac:94:
9c:a1:7c:c0:8a:49:d4:01:70:ab:98:bd:0e:45:ad:0b:9b:04:
cd:01:ea:3a:5b:d7:66:11:b3:e1:80:38:ab:71:f6:f0:9a:e8:
ac:e0:79:4f:4c:d8:e7:aa:30:33:0f:ba:3e:3a:4e:a3:bc:bd:
c9:16:bb:81:84:a6:6d:8c:da:5a:ff:1a:4e:90:b0:00:cd:5f:
c2:62:4e:05:20:40:d8:d7:9f:34:43:f0:48:ba:4f:e1:c5:10:
5b:29:7b:e6:29:04:ac:8f:0b:1c:f8:61:c1:0f:2c:3d:dd:ba:
5e:ed:da:c9:89:2a:2b:c9:69:fc:6e:7e:7a:f3:14:34:7e:31:
66:8a:21:a9:b7:5f:1b:92:85:8d:ea:58:3d:2b:e8:2b:54:ed:
16:98:75:69:6d:aa:06:a7:3d:a3:b5:fa:b0:20:69:f4:77:4c:
ca:e4:52:a8:24:4d:06:fa:d4:8f:b5:d8:aa:1e:26:aa:52:21:
a8:bd:f9:44:85:9b:8a:d7:1d:b5:e8:b6:61:45:ed:b2:75:fe:
e9:31:cc:5f:6e:5d:ed:c7:a8:22:14:65:b8:71:8c:27:4b:09:
44:d2:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:59:31 2025 by rpki-client