Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: kGWJcMD+5sMhcDbP1Vlf4aZ8QiTcG8i8wtMJQGl81o4=
Subject key identifier: 5F:41:F4:C2:B0:3B:FC:85:56:AE:46:5B:EC:74:3C:CF:42:3B:74:5F
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 01985A21F074F87A185C2E5E27BBAFBA82EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 11C1
Signing time: Wed 30 Jul 2025 07:00:30 +0000
Manifest this update: Wed 30 Jul 2025 07:00:30 +0000
Manifest next update: Thu 31 Jul 2025 07:00:30 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: Go2z4kf6VMBWYwqSHdNGyzTPqw93Ijwy3N87Y1ezaOI=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:21:f0:74:f8:7a:18:5c:2e:5e:27:bb:af:ba:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Jul 30 07:00:30 2025 GMT
Not After : Jul 31 07:00:30 2025 GMT
Subject: CN=5f41f4c2b03bfc8556ae465bec743ccf423b745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:78:69:85:04:0f:00:36:ef:d6:59:df:07:
8b:ce:df:2c:2d:13:57:08:d3:f3:3e:2c:da:19:bf:
45:bd:15:bc:26:be:17:4d:df:57:12:2b:e8:90:c1:
18:b6:fd:30:12:47:8f:50:37:25:6f:05:13:97:8f:
91:84:5a:ea:36:b6:49:25:5c:e7:91:d5:33:d0:80:
23:c3:7f:18:52:5a:05:fa:0e:93:67:89:b8:06:ee:
06:8f:55:e1:1a:93:94:1f:ae:e6:d8:97:63:d0:98:
5f:d8:da:9f:6d:d9:00:b5:59:0a:88:82:d0:84:11:
c1:e3:11:13:c7:dd:f4:e0:af:fc:98:8e:c7:b4:8d:
d7:e3:4e:ba:f1:45:ec:40:6e:b4:5e:7f:65:2a:de:
ed:b9:38:ff:eb:b0:ff:01:a4:a5:ad:ea:01:f0:9f:
ca:23:f5:b5:ce:6a:f2:cc:db:55:b1:4d:81:6c:62:
05:ec:4a:3d:33:a3:27:2e:4b:46:a2:15:98:dd:00:
de:3f:bc:84:9e:4c:f5:2f:3d:06:08:41:a9:9d:9f:
29:5f:0c:72:a6:c7:61:9a:07:43:32:10:9c:2a:3b:
9f:5e:7d:2e:3d:c8:bf:ae:20:55:67:64:d0:9e:c8:
77:81:c7:c0:bc:f8:a4:75:1c:6d:af:49:3d:b9:09:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:F4:C2:B0:3B:FC:85:56:AE:46:5B:EC:74:3C:CF:42:3B:74:5F
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c4:3c:ae:78:45:58:33:ac:e7:d5:26:65:d0:45:ac:03:da:
02:9d:5c:af:d3:60:59:a0:08:2c:be:67:09:5a:e9:57:73:0d:
8a:42:b6:b7:41:9d:53:85:6c:36:17:00:17:dd:c4:46:b5:40:
dd:4e:23:2d:eb:a2:3f:c4:86:3f:bd:09:b0:2b:73:68:60:dd:
cf:cd:a8:6c:da:af:a4:cb:79:1c:30:18:8b:8a:16:8a:f0:ee:
7f:c1:95:86:ed:c8:b3:0c:84:96:67:51:fa:1c:a1:c5:5a:23:
26:ea:15:eb:6b:27:08:7c:8a:7d:68:48:6e:b6:2c:db:87:97:
d2:37:70:fc:97:5b:6f:9d:e7:e9:23:0a:53:df:7d:0e:60:ab:
93:95:ed:91:c3:2e:6c:9e:67:b0:f6:6a:7e:b8:af:e0:38:2e:
1f:b9:89:21:eb:2a:43:e5:2d:05:df:18:14:b7:7f:bb:72:7e:
00:5a:33:8a:05:27:c9:52:e6:bb:9e:f0:fd:55:cf:aa:1f:e6:
c3:7b:a6:f2:03:e8:25:81:4e:2f:49:65:b8:7d:f1:68:61:9d:
df:86:13:b6:a0:5e:6e:61:ee:de:30:69:12:b3:6a:23:1c:c4:
a2:75:83:d1:f9:05:e2:55:11:d9:e3:3d:67:65:bf:9b:e1:08:
32:6c:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 07:58:24 2025 by rpki-client