Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: uXvI0bpvoMeJbPtBkyIGiUZKbDi/P8eybLtC7X+plOw=
Subject key identifier: EC:78:20:D3:93:77:A9:C4:BC:20:E6:B2:A1:72:BC:EE:3F:78:51:EF
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01984A78172037032A378B65E6901DA78361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 091C
Signing time: Sun 27 Jul 2025 06:00:40 +0000
Manifest this update: Sun 27 Jul 2025 06:00:40 +0000
Manifest next update: Mon 28 Jul 2025 06:00:40 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: W9szygN80MYcbXnGGMVYIxY/HWh87EWg7hEErHpyiCQ=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:17:20:37:03:2a:37:8b:65:e6:90:1d:a7:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jul 27 06:00:40 2025 GMT
Not After : Jul 28 06:00:40 2025 GMT
Subject: CN=ec7820d39377a9c4bc20e6b2a172bcee3f7851ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:59:67:42:79:34:a3:3a:17:f4:5b:e4:fc:
46:0e:e4:ad:18:11:16:5e:13:29:f4:87:e7:2f:72:
e1:2d:62:77:89:8a:10:92:9a:58:1a:62:57:7e:42:
c9:97:11:77:2f:25:b1:b3:e4:2d:ef:78:ef:29:7d:
98:51:73:e0:a7:1b:99:67:71:1e:e0:4e:03:22:74:
3b:ce:8a:6d:7f:53:5b:de:33:f0:37:dc:9a:ba:77:
90:da:8c:0c:c1:68:5d:b8:3a:9d:b9:2d:dd:d5:0f:
c4:9a:58:2b:21:99:fe:10:8f:49:10:99:d3:be:ba:
10:d5:06:72:92:0b:cc:89:7a:e4:8b:e4:55:be:25:
2d:21:ed:79:8c:76:85:ad:30:75:95:c5:44:e6:9b:
2d:66:dc:3f:14:cf:93:f3:b7:52:50:a4:55:f4:fe:
bc:97:96:2c:a8:96:3a:08:57:56:3a:d3:99:e2:f4:
18:37:3c:ef:0e:ee:1d:dd:40:e3:70:6c:1a:30:fa:
2c:e4:6f:d3:1a:77:9e:24:70:cb:f9:14:9c:a8:b4:
aa:50:84:d0:c7:d2:76:e5:6b:d5:ef:ab:a9:9b:e6:
05:0e:23:7b:e3:99:e6:5d:71:a7:11:a0:82:31:1b:
ad:b2:2d:5e:50:bb:d5:fd:0a:8b:64:ee:64:92:df:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:20:D3:93:77:A9:C4:BC:20:E6:B2:A1:72:BC:EE:3F:78:51:EF
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6f:f1:5a:91:b0:39:05:48:dc:0c:2d:f4:45:99:32:ce:62:
4a:e8:67:e8:4d:d4:d6:fa:80:98:db:88:7d:fe:ed:32:75:71:
69:87:8c:19:4e:fe:92:49:40:73:00:cb:df:05:e7:cf:bd:e7:
4b:c4:cb:16:e0:c8:d2:76:cf:ec:01:cd:af:d0:de:77:a1:17:
78:06:03:af:56:a2:b2:c0:de:fc:44:a8:52:35:98:06:1a:c9:
63:27:55:5e:f2:35:06:4d:48:b8:f7:09:58:54:ee:d0:3e:4c:
9f:3b:92:b0:82:d5:42:3f:78:4b:88:e2:5e:0b:49:da:5b:24:
69:de:f2:c4:fc:e0:36:cc:d6:17:c8:6b:91:65:0f:da:21:91:
3a:d7:63:09:7d:f1:4e:99:53:b6:d3:d7:5b:41:c1:05:20:a3:
47:8d:0d:1c:f4:70:86:ab:42:26:19:d4:79:f7:e0:f6:89:62:
d4:4b:40:79:dc:04:aa:33:7f:92:49:00:23:d2:62:5b:e4:72:
0b:c5:f1:41:68:24:99:a1:a4:4b:ce:48:44:51:c8:a7:09:34:
9c:ef:a8:23:23:ec:01:aa:cf:3a:c6:e0:c4:dd:c5:3e:34:b1:
2c:6d:d4:8b:2c:2a:21:fa:60:5b:48:53:63:69:dd:62:11:bf:
d4:77:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:28 2025 by rpki-client