Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: CEDU60ScSdEaz9T7rPtGWWP8qokEubRk8yytOs4QDq0=
Subject key identifier: 5F:7F:ED:68:10:FD:C2:2F:5A:D1:28:69:91:D0:79:FB:BD:38:BB:1C
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019848F720479038C3E3199CD8B8F25525A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0CF7
Signing time: Sat 26 Jul 2025 23:00:11 +0000
Manifest this update: Sat 26 Jul 2025 23:00:11 +0000
Manifest next update: Sun 27 Jul 2025 23:00:11 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: 57xFnrnegdY0ODp/qZPOCvUQQQgnU9KDa+82RpemYBU=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:20:47:90:38:c3:e3:19:9c:d8:b8:f2:55:25:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Jul 26 23:00:11 2025 GMT
Not After : Jul 27 23:00:11 2025 GMT
Subject: CN=5f7fed6810fdc22f5ad1286991d079fbbd38bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:5f:c6:75:8e:2c:f0:dd:cf:7c:50:cb:f4:
09:a5:6f:ff:b5:1f:ac:a6:b5:5e:38:73:d1:cd:81:
f1:ce:cc:88:ba:24:2b:0c:22:63:98:72:56:bd:0b:
96:71:8f:6a:90:ce:1a:9f:55:b0:d2:af:59:5f:53:
25:ac:cc:79:6e:7e:08:04:d4:36:fd:60:03:f4:ce:
55:61:40:db:64:7a:b6:34:b5:54:78:3f:13:76:0d:
2b:46:25:d6:cf:d3:35:ba:14:43:8c:0b:b9:31:48:
f8:0c:39:9a:14:ad:5b:91:74:d3:8a:8e:ec:c0:31:
5b:27:66:97:98:24:99:23:2b:42:a0:10:83:97:7b:
17:73:1e:4d:24:97:f0:d0:4b:76:f3:f6:cd:50:cb:
0e:38:30:47:ab:f6:5b:6b:22:f3:07:b2:dd:04:82:
e6:06:f0:4f:2e:5e:b9:69:7c:80:a7:57:c1:56:d8:
7c:54:c6:2e:1c:18:7b:ad:43:fe:fd:3d:3f:3c:c8:
d6:a7:46:ba:5a:0c:7e:6c:c4:ce:d5:e2:54:d0:29:
aa:99:ba:f2:d1:a6:83:d0:03:ae:33:dd:bb:a8:43:
42:54:19:b0:94:00:44:23:54:ab:19:6a:fd:35:01:
5a:d6:17:35:4e:44:4d:55:9c:bd:74:50:31:32:80:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:ED:68:10:FD:C2:2F:5A:D1:28:69:91:D0:79:FB:BD:38:BB:1C
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:b3:36:71:54:6f:b1:48:22:66:b9:7c:6c:16:49:83:43:
09:82:21:0c:d7:c2:42:49:c9:03:83:d0:02:61:f8:0d:d3:0c:
a4:ed:96:30:6a:86:dc:83:9f:3a:9a:02:7a:e5:8a:a7:50:4c:
32:14:9f:7b:3a:5b:b9:f4:aa:07:38:2c:d1:09:a1:10:14:34:
0c:94:88:26:00:3b:14:53:bf:59:3a:ad:e3:a9:a8:33:b4:85:
a9:1b:11:e7:d8:ce:23:4a:40:6d:8a:a0:4f:91:e7:7f:96:c6:
19:6b:d3:0c:98:a2:a1:fa:18:41:95:de:e0:1e:1a:b4:0a:e1:
a0:c6:03:65:76:22:d6:da:52:2c:aa:dc:ec:61:56:c5:16:c0:
76:77:8b:1c:e7:7d:97:27:4c:08:13:b4:03:29:c4:ef:09:c3:
8e:f6:e3:64:9f:90:4a:ab:48:17:50:12:eb:10:93:35:0a:ac:
98:16:32:d8:8a:11:16:b0:f2:6e:9b:45:8c:98:03:f9:f3:d2:
fc:c6:7e:f1:53:e7:2c:2e:14:0f:a1:ed:96:4b:2e:8a:ff:f9:
e0:d7:db:67:4a:c1:0e:49:e6:c9:6c:01:2f:57:95:95:7d:5c:
f5:0d:32:9c:33:9e:46:31:1d:be:81:a9:91:4c:e2:cb:dc:c7:
6a:d6:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:45 2025 by rpki-client