Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: OtsULFIn+7DfaLv+zjyXUbzjaLQA0GwuFoX7T27h9pg=
Subject key identifier: EA:94:B2:13:57:C5:9F:5A:72:61:F2:F2:8A:16:CA:A2:9D:CD:EB:27
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 01984889BBE83D911BC7A7D8A8C52EEB06D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 21:00:42 +0000
Manifest this update: Sat 26 Jul 2025 21:00:42 +0000
Manifest next update: Sun 27 Jul 2025 21:00:42 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: c/WMjUSp/raf/IhQGDhE1c4W5iVV4nkuwi0V5xr+vf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:bb:e8:3d:91:1b:c7:a7:d8:a8:c5:2e:eb:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Jul 26 21:00:42 2025 GMT
Not After : Jul 27 21:00:42 2025 GMT
Subject: CN=ea94b21357c59f5a7261f2f28a16caa29dcdeb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:55:46:73:74:c3:f0:e6:4a:27:be:bd:fd:
3c:74:ef:dd:0f:a8:cf:71:c9:92:2b:e3:76:74:71:
9f:f7:8d:cb:c3:47:75:81:d8:9c:bb:5e:03:eb:e9:
21:6c:e9:07:01:5b:2d:56:c1:f8:48:64:24:1d:1c:
62:dc:e4:3b:8a:eb:a9:39:53:b9:06:65:ee:91:ae:
7b:cd:f8:97:de:b6:32:f7:b9:ad:a0:d0:9d:fe:d4:
56:80:e8:ae:4e:06:42:b6:c0:1c:d0:a7:f0:07:cb:
c3:b9:78:91:18:5d:86:16:b6:b9:b1:39:5c:55:c2:
98:48:cc:72:ec:f7:92:15:37:3f:8f:0e:21:0c:f8:
82:7c:8c:6a:b4:eb:4a:aa:c1:0a:f9:f2:f2:e1:b7:
4a:fd:fc:57:04:9e:3e:10:e7:1c:72:d3:d0:fb:0c:
14:ee:db:e7:31:cb:89:da:4f:d2:32:7c:34:90:db:
1c:3e:76:e0:18:f3:54:de:85:2f:b4:76:fb:c4:7c:
21:ee:2b:8b:16:ec:25:da:68:f0:a8:12:8e:11:09:
76:b8:f1:a7:de:cb:0c:4b:19:f8:0e:69:56:7c:24:
14:c0:55:bf:eb:1f:2b:be:7c:f6:f0:bc:36:a7:01:
7d:bb:58:15:93:ed:28:47:23:09:b7:4d:d4:67:98:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:B2:13:57:C5:9F:5A:72:61:F2:F2:8A:16:CA:A2:9D:CD:EB:27
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:80:7a:b6:a5:de:37:03:a9:7c:ce:83:e8:cd:3a:56:c0:37:
5d:17:8b:34:f9:5a:45:10:37:9b:b1:a9:b5:ae:82:6c:70:51:
3a:8b:ab:9f:7e:42:c0:a7:52:43:23:b4:65:3c:84:23:db:4f:
7e:2f:e8:16:a6:e8:dc:3c:12:78:53:a7:cc:2f:54:af:cb:63:
d2:af:5e:ef:bc:bd:7d:5a:f8:5b:b5:78:3e:a7:25:49:87:71:
1f:6e:a8:0e:81:59:0c:b0:59:4e:b4:3e:29:c9:ac:1b:06:fa:
91:1b:4b:fd:3b:1a:23:56:f7:9c:3a:d0:ff:22:21:78:ce:fa:
8d:77:44:a7:28:71:a7:6f:f9:9c:81:c6:2e:0d:ec:4a:aa:76:
33:ae:5e:3e:05:db:24:77:b4:8d:96:31:b2:29:88:60:ee:70:
b5:0e:a4:bd:e0:99:c0:26:1c:f7:e6:7e:e8:e9:3f:7e:a3:07:
47:53:49:e2:6b:f8:7e:18:e9:34:08:c8:f4:7f:df:32:c0:c2:
54:6f:07:d7:20:04:12:73:48:75:4c:95:46:0d:5b:08:ff:bb:
b3:98:f3:ec:68:89:e8:81:da:d0:c2:45:38:cc:ee:11:d8:f5:
d7:d9:d0:ba:28:2f:6c:3a:85:91:04:30:98:ba:46:04:cf:7f:
fb:be:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:27 2025 by rpki-client