Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: xHEOShksJVwdKyON1ZiKflJpJAo9p27bdVfERiGUNbM=
Subject key identifier: FF:50:47:DE:DF:53:D4:36:2D:D3:C9:5A:40:9C:2A:56:84:1C:8E:4B
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 019840D03303D92B787DB48DAFE4BEC53009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0CB5
Signing time: Fri 25 Jul 2025 09:00:42 +0000
Manifest this update: Fri 25 Jul 2025 09:00:42 +0000
Manifest next update: Sat 26 Jul 2025 09:00:42 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: HIEdDD7UpOAPE8i0p4lCHFA4RgaQacllsJ9ZMkJUCOw=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d0:33:03:d9:2b:78:7d:b4:8d:af:e4:be:c5:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Jul 25 09:00:42 2025 GMT
Not After : Jul 26 09:00:42 2025 GMT
Subject: CN=ff5047dedf53d4362dd3c95a409c2a56841c8e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:9c:aa:6b:1f:98:de:07:12:61:e4:d7:97:
a9:e0:5d:31:a6:a9:63:e5:00:90:11:e9:66:75:61:
a7:c4:4f:1c:23:ec:a8:af:2e:7d:dc:60:a2:19:da:
54:8f:0d:96:d1:fa:ee:ec:cb:75:c7:f1:85:e2:cf:
59:8c:ba:1f:d2:cd:73:38:10:49:a2:4f:c1:fc:e6:
1c:a1:07:50:9a:8a:b9:fd:c2:c0:93:5f:53:31:fc:
90:d7:dc:d1:7e:6e:ee:a8:3c:f4:57:fa:e6:ed:fd:
dd:ad:31:e6:c9:40:41:bf:53:8f:7f:bc:8a:e4:cf:
1a:71:4e:5e:f9:77:f0:d6:db:41:a8:c1:b0:23:ce:
68:55:44:46:b0:8a:02:c3:f6:b0:2a:f7:27:dc:0c:
80:2e:6f:b1:33:2b:39:70:be:5a:f3:1e:79:ec:33:
a3:d6:81:54:ec:5e:52:c7:46:65:46:a0:5d:de:2e:
06:b0:b9:9e:b2:0f:57:aa:47:6e:82:c2:5f:a4:93:
15:68:35:73:a3:89:a3:d4:bb:af:43:dc:62:cb:58:
d7:03:9d:1b:c5:39:1f:75:3c:85:ca:69:37:ab:6c:
5f:3c:fb:32:24:0d:d9:21:e8:d0:b9:e0:cf:ad:f4:
ea:f7:46:8b:f4:7a:ae:70:92:e4:03:dc:3f:7e:10:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:47:DE:DF:53:D4:36:2D:D3:C9:5A:40:9C:2A:56:84:1C:8E:4B
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:af:40:6f:5c:19:4d:7e:4e:6e:ba:4f:39:62:c2:87:d3:a9:
57:66:db:46:cb:f3:f8:96:2a:37:cd:71:a7:5e:e8:80:10:49:
ba:18:5e:83:a9:83:14:b2:37:e4:85:46:8a:66:b1:96:c3:7b:
99:bd:65:4b:e5:40:8e:21:20:21:6e:f6:32:84:e7:90:a3:b4:
2a:06:df:9f:d1:48:6c:ca:8a:ee:be:83:42:54:5f:41:f9:dc:
13:a3:a3:8f:2b:31:56:24:94:0b:57:ce:de:e8:7d:c1:8f:9b:
9d:21:66:44:60:b6:26:c1:0f:1a:2c:fb:53:25:b2:b5:d0:14:
51:41:66:04:14:65:ab:3c:22:db:22:0c:0f:a9:d6:1d:e6:b0:
10:64:bc:2b:ec:05:53:e6:92:8b:06:20:4f:73:06:df:83:49:
f5:2c:23:91:80:74:00:84:87:93:38:4f:cf:3d:b3:40:6b:14:
90:84:33:7b:23:b9:29:4f:e2:07:1a:87:fd:b9:35:15:45:7e:
3f:d4:03:35:08:8a:53:ed:52:5b:9e:63:b0:25:90:8b:36:4a:
2e:fe:9c:b0:14:dd:17:6f:99:00:d1:c7:57:0c:03:47:2e:4b:
23:8c:ea:a0:ca:f8:65:24:ba:b9:aa:9c:89:d9:04:e8:97:dc:
50:7a:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:48:29 2025 by rpki-client