Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: J9SXTiopJzohDjyqZM0CvTGR+dynWRPE9x+FUAskzcM=
Subject key identifier: 05:3F:4A:FE:83:EE:FD:A8:6D:E7:24:67:9D:CA:4C:07:B2:15:A8:B3
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01984664BC035BBB2974CA57E019D693ACDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 11:01:03 +0000
Manifest this update: Sat 26 Jul 2025 11:01:03 +0000
Manifest next update: Sun 27 Jul 2025 11:01:03 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: N4WL8r/J/ipVtRp+OtYwwq+iUJ+XRzxo+vV0oAKOmNA=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:bc:03:5b:bb:29:74:ca:57:e0:19:d6:93:ac:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jul 26 11:01:03 2025 GMT
Not After : Jul 27 11:01:03 2025 GMT
Subject: CN=053f4afe83eefda86de724679dca4c07b215a8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:52:8d:73:c3:de:98:4c:37:f1:98:5d:6b:
3e:f3:8d:5a:6f:fe:5f:e6:a5:4f:b5:3a:1f:6c:cf:
0f:b7:0f:f3:a2:7c:52:a6:a2:55:97:8b:19:9a:8d:
58:ce:2e:77:4f:6e:61:ed:53:c6:5d:d5:b3:b1:50:
40:a8:27:7c:3f:e8:10:d1:81:27:ea:ab:22:c7:28:
47:1a:54:76:15:57:4c:79:26:4a:2d:a3:82:90:a8:
77:cf:9c:bd:83:df:31:e2:e0:b2:a1:f8:a3:b1:c6:
9e:d1:dd:2c:f9:4b:05:da:5d:c9:03:9a:f6:6b:a0:
0b:b4:0e:9c:12:79:98:87:9a:30:fd:11:1b:b9:e0:
d3:57:d0:e5:2e:05:03:94:a4:42:ee:aa:ff:72:49:
93:55:17:f7:d3:dd:5d:af:ac:2f:bd:a4:42:1b:a5:
bc:92:4a:f4:e4:07:cb:4b:d3:67:74:d2:a2:8c:52:
7d:1e:88:e2:26:87:cb:7e:7f:dc:9d:28:44:23:f0:
50:80:f0:bc:53:ea:a8:3d:25:f7:fd:f9:d3:20:7d:
41:85:9f:a5:b8:1d:f3:82:55:63:0e:77:5a:d2:78:
b3:91:18:fe:24:7a:c1:81:30:d8:8a:5a:a2:58:c1:
d4:5d:62:36:e1:be:de:20:27:5f:4f:27:22:5f:df:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:4A:FE:83:EE:FD:A8:6D:E7:24:67:9D:CA:4C:07:B2:15:A8:B3
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:22:d2:dd:74:6e:0b:19:e9:44:30:7c:b0:e5:28:69:02:
4f:8c:bb:b9:a2:99:6e:31:22:62:91:6d:63:43:00:73:9c:cc:
70:6c:de:a0:74:a3:77:2d:ed:28:49:9d:a1:48:11:1a:d8:a5:
19:8b:64:3e:e3:e7:8e:5c:2c:1e:42:06:9b:4e:5d:4f:d1:53:
19:8b:30:f6:b8:4a:82:0c:d6:b6:a8:e9:de:9e:e2:6d:9d:97:
ca:9b:a7:a4:86:af:06:a5:de:c1:0d:7a:80:9c:90:e7:37:1b:
a0:b8:8d:51:a6:50:40:b9:82:e0:00:66:77:a7:cf:df:0e:7b:
a0:0b:f3:b3:40:c1:47:86:6a:81:8a:c0:df:cc:38:cc:0c:c8:
f7:bd:d8:c8:ed:1c:79:2e:be:91:37:ca:dc:21:7e:ad:d0:f1:
2f:9e:a9:81:1b:a0:52:af:a8:6b:49:27:2c:f0:46:4b:15:35:
ec:fb:d0:2c:ad:ec:80:d8:8e:68:25:2e:ae:71:a0:28:24:84:
84:d2:42:c3:25:c8:e4:36:d9:60:79:1e:11:64:11:a5:7b:dc:
fd:9c:b5:b0:da:25:7e:b7:7c:38:f7:14:d2:23:36:70:51:8f:
fb:0f:e8:90:b6:87:f3:53:53:ab:da:5d:75:5e:57:bd:0f:74:
f3:6d:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:43 2025 by rpki-client