Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: UiwJQRvuqGh88tZKGyoR1a3ZHr+26pL8ejnkgk2dnQY=
Subject key identifier: 48:F5:C1:0F:39:17:B8:7B:62:08:60:3F:EA:29:B8:D3:9E:3E:26:66
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019847E521B5F62633BE27B683C8449C9122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 06D9
Signing time: Sat 26 Jul 2025 18:00:55 +0000
Manifest this update: Sat 26 Jul 2025 18:00:55 +0000
Manifest next update: Sun 27 Jul 2025 18:00:55 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: nKFu7ltz1rc9MGk3XmFWi/N6bqHWdKX5DfjJK5fVlFw=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:21:b5:f6:26:33:be:27:b6:83:c8:44:9c:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Jul 26 18:00:55 2025 GMT
Not After : Jul 27 18:00:55 2025 GMT
Subject: CN=48f5c10f3917b87b6208603fea29b8d39e3e2666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:b3:51:06:96:55:7c:90:ca:1a:83:1e:2b:
0d:dd:d1:80:2f:14:48:f6:2e:5f:76:20:76:88:3b:
52:ef:1c:c9:43:d9:c2:bb:6f:7d:f9:e6:c3:8c:be:
1c:b9:f8:a3:39:11:14:ed:48:a0:b5:65:8d:56:78:
6c:6e:56:a6:39:51:6d:25:db:82:10:84:9a:d3:7b:
0f:66:7f:6f:d6:70:57:97:fc:6a:09:fc:0e:ff:40:
f5:68:4d:cf:19:ea:ee:33:a8:4c:76:87:03:b5:8b:
58:bf:88:72:70:23:6b:d4:2e:a4:77:42:2b:45:86:
33:e3:01:5c:88:69:53:de:6d:3f:bb:16:1b:68:a0:
0d:c6:ae:c1:d1:b5:34:91:93:df:4a:30:58:50:8d:
4b:35:97:65:8a:ab:1e:9d:a3:ad:c9:88:50:ce:78:
c4:ae:20:b3:ca:67:dc:ee:7b:b8:d8:ee:45:5c:09:
21:6b:68:fa:ec:c8:88:05:51:8a:48:19:68:76:b7:
ce:ea:e3:80:da:92:05:13:41:5f:af:d5:d4:a7:4c:
52:d7:aa:3a:4b:9a:d9:df:b5:06:f8:dc:90:ff:9d:
a7:24:d8:c0:4f:46:ca:fb:b9:69:86:8f:5e:aa:70:
bf:0f:7d:98:4a:72:73:72:5a:cc:98:10:af:30:fb:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:C1:0F:39:17:B8:7B:62:08:60:3F:EA:29:B8:D3:9E:3E:26:66
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:65:d0:72:21:22:c2:60:e9:c2:2a:96:8a:ee:ae:8e:07:e2:
43:01:34:38:96:37:2f:9b:5a:fc:4d:5b:d7:74:26:e1:11:5d:
23:b7:a0:8d:e1:24:af:5d:e1:73:b3:b5:27:9a:6d:47:5b:37:
71:93:12:28:dc:02:3c:2b:eb:67:86:69:07:8f:76:9d:a1:95:
95:ef:1d:ff:cb:71:25:87:e6:a2:9a:fb:ea:be:04:b0:23:5a:
2b:2d:eb:eb:b3:9a:13:94:7c:55:b3:6e:26:33:8c:08:e9:32:
66:02:4f:5f:50:1b:c3:6b:16:d3:76:f0:b5:c4:29:a3:1f:6a:
69:aa:b2:c9:b5:85:d6:cb:e1:27:f4:49:00:e2:54:2c:b2:0b:
e0:33:19:c7:51:da:6e:95:62:37:2f:3c:df:3f:de:ba:da:48:
f4:3d:68:c9:8e:88:48:f7:7a:a8:09:8e:1a:51:a1:2f:a8:7e:
65:75:6a:30:ed:62:fc:a9:1f:01:28:65:ca:19:c0:b4:2d:3c:
0e:ab:49:6f:8c:a7:e1:cf:fa:bd:7b:27:e1:db:49:39:25:cb:
1c:08:19:dc:54:d3:a3:1b:78:94:26:0e:fa:19:a7:31:c9:2f:
59:17:7f:85:61:35:87:5a:a5:68:84:75:f5:15:a9:78:0a:35:
6d:1e:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:24:29 2025 by rpki-client