Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: XPZjbaRbt2qlR5g2+dr2YeMHUHQkft9YJK7Zc/5nras=
Subject key identifier: 5F:51:F1:06:D7:7B:0D:85:14:96:82:99:AF:0D:7B:7B:77:C9:6E:5F
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 01984776E3D55880343174F88194B57397C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:30 +0000
Manifest this update: Sat 26 Jul 2025 16:00:30 +0000
Manifest next update: Sun 27 Jul 2025 16:00:30 +0000
Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: /XI8rhmfUhaZt4qo8RKNcA6PvQlGOkZKHfPkbPwSYhw=)
2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=)
3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e3:d5:58:80:34:31:74:f8:81:94:b5:73:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jul 26 16:00:30 2025 GMT
Not After : Jul 27 16:00:30 2025 GMT
Subject: CN=5f51f106d77b0d8514968299af0d7b7b77c96e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:2a:6c:c2:20:d8:48:01:91:ef:6e:51:7e:
b8:2d:cd:63:90:8b:09:8f:79:8b:97:7b:72:5c:6e:
97:84:55:7c:75:cf:3f:ca:be:54:9f:db:70:81:62:
f5:08:12:6a:9f:6c:a0:80:27:36:37:0a:b9:d7:97:
d0:fe:79:aa:f1:73:ef:38:e2:5b:7d:2a:9e:dd:3c:
fb:c5:83:64:5a:8b:d7:49:48:f4:52:47:33:bb:e4:
1d:2b:65:5b:38:c7:24:24:07:80:51:3a:20:ac:1c:
02:ac:cd:14:46:d7:49:ed:88:25:39:d1:6e:88:06:
de:ca:90:47:39:82:0c:03:50:cd:34:9c:d5:af:a1:
d7:bb:b4:fe:ae:1e:aa:07:0c:85:d4:ea:d6:b9:f7:
56:ee:6c:f8:ca:34:7f:34:6e:7e:e1:51:cd:51:46:
06:e1:ce:9f:58:67:91:83:db:ac:60:f0:21:25:e3:
93:fd:12:66:bb:93:9d:9d:ec:d2:85:c4:fd:18:b5:
b7:da:a1:be:b9:56:90:bb:a9:07:02:6a:f9:60:17:
29:36:15:ee:55:88:11:35:bd:e4:bc:a6:f7:77:52:
f0:d8:73:08:13:da:fd:80:c6:97:22:9a:e2:d3:3f:
f1:e9:6f:e3:d8:19:0a:f0:e1:28:80:9d:23:d5:07:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:F1:06:D7:7B:0D:85:14:96:82:99:AF:0D:7B:7B:77:C9:6E:5F
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3b:ee:9d:6b:b4:b2:da:46:07:15:e6:44:aa:38:8d:d4:1b:
37:86:07:82:e7:71:f1:ac:39:90:df:14:04:29:93:92:6e:e0:
e6:08:18:1e:d9:8c:42:0e:30:b4:d0:ba:b4:2a:6d:d4:e7:b6:
61:96:a0:55:ad:ef:f9:fb:8f:e2:98:a4:b9:95:ee:0c:5b:6e:
2f:5d:cc:d9:63:15:6f:fd:7a:3c:3b:a2:5a:a1:ad:22:0a:93:
bc:98:7e:67:d6:bd:f7:43:8f:3f:62:a5:3c:4f:00:53:a5:d7:
dc:be:d2:55:0a:3a:da:87:a5:03:7e:04:87:5f:77:bb:3a:d5:
70:70:9d:d4:0a:c3:7d:76:4a:a0:00:84:b9:c6:78:1c:9b:25:
ba:80:2a:00:0d:b7:48:41:1e:8f:c8:32:34:e8:a8:4f:a7:81:
14:fd:5d:21:d6:6a:73:28:21:5e:3e:16:87:f9:de:95:18:6f:
d3:94:ee:72:77:a4:94:01:ad:88:d1:ca:b9:da:ed:00:da:7b:
75:e1:6f:f0:21:2f:89:cd:3c:6e:6e:b0:72:8a:8c:d2:10:98:
0a:bb:9a:b7:2c:4f:6e:b6:a6:b5:c3:4c:ab:bd:d1:59:ac:3b:
c7:5c:a1:c5:68:b7:7c:3c:58:8b:55:57:1d:5a:26:bf:bd:1c:
d4:aa:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:27:06 2025 by rpki-client