Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: tFxNAOV7X2FNufq5qEYn8356q1cXWZO4M2FZyYkiNB0=
Subject key identifier: F1:3A:17:6C:BE:69:55:CA:11:AF:64:C9:E6:36:06:B9:6F:0C:4A:A5
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 01984C9DAD4465CC6D1D7ADAD857E45FC580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 135E
Signing time: Sun 27 Jul 2025 16:00:58 +0000
Manifest this update: Sun 27 Jul 2025 16:00:58 +0000
Manifest next update: Mon 28 Jul 2025 16:00:58 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: UQGZbQu5LL6cq1ZlRQ+aWk+wsYgYB1X1gBX3kkNdwDg=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:ad:44:65:cc:6d:1d:7a:da:d8:57:e4:5f:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jul 27 16:00:58 2025 GMT
Not After : Jul 28 16:00:58 2025 GMT
Subject: CN=f13a176cbe6955ca11af64c9e63606b96f0c4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:0d:aa:43:aa:01:31:ce:fe:04:88:a2:8e:
95:0f:32:0c:65:cf:e9:cc:cf:57:8b:22:ba:1f:e3:
d6:d1:b7:1f:de:5a:fa:ec:f0:cc:b4:51:a7:bb:38:
69:2b:43:d6:ce:07:61:e8:a5:7f:99:95:a3:c2:04:
b5:63:8e:97:45:ce:e4:31:11:89:cd:c6:bc:d5:2f:
e6:58:4e:0b:0d:80:1e:4f:ec:64:bd:c3:07:15:dd:
1d:1c:db:a1:cb:ce:12:1d:db:ff:36:76:f0:6c:6a:
b6:ca:df:f6:3e:21:94:75:ae:c2:9b:17:bb:b3:38:
d8:49:6e:2f:dd:2c:b7:3b:e6:70:e8:31:38:4d:14:
e6:46:d4:8e:5f:01:7a:41:8e:18:27:b8:14:b9:a3:
ea:f3:ac:2e:20:2a:00:28:8c:bd:05:5b:30:d4:56:
5d:b4:a8:4b:ae:c8:c9:a5:d5:a7:3a:23:66:e6:fb:
84:a5:9b:66:80:ad:27:0f:00:7c:67:77:66:c1:bc:
55:b7:61:6a:76:6d:e6:8d:65:fe:5f:75:88:a3:97:
50:2c:7e:f4:e4:65:c9:91:40:df:38:d2:fa:e5:33:
3d:8e:03:7d:d1:08:16:ce:c3:77:5d:f5:f4:48:3e:
ae:40:66:93:eb:c6:c8:b4:0e:0e:bc:92:b1:a2:b1:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:17:6C:BE:69:55:CA:11:AF:64:C9:E6:36:06:B9:6F:0C:4A:A5
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:46:8d:c8:c5:19:b7:82:7b:22:9d:b0:70:e4:94:3d:b6:
a5:0a:57:11:fe:7c:bc:02:03:0f:df:2a:38:ce:bb:1f:5e:03:
9a:80:f2:91:f3:97:5b:60:83:2b:55:e6:b7:4c:6c:80:90:60:
de:98:a7:1b:3e:ac:1f:58:d0:a9:32:9f:cc:a9:1e:5d:29:cd:
2b:70:e1:d3:f8:4f:a7:38:97:d6:15:95:82:6d:c0:a7:02:c2:
1f:1b:c9:e8:d5:21:af:ec:72:3d:33:1d:00:a6:54:a0:6d:6a:
e9:9a:ee:80:d7:67:f0:27:a6:1b:be:57:af:eb:5b:2f:3b:ff:
f0:ca:c7:9e:27:aa:a2:6b:a4:90:14:ee:9b:c4:4d:a5:8e:af:
51:e4:a3:4e:5f:98:91:3a:be:48:11:0d:e4:ae:db:9d:b5:24:
79:71:11:1c:0e:96:82:b0:97:db:ea:e7:a7:b6:bf:2f:b4:93:
2c:90:1f:e3:cd:97:cb:e1:53:78:64:37:88:ae:33:9a:a2:07:
cb:d3:a7:fe:42:13:99:85:5f:b4:67:68:32:64:32:c6:0f:09:
5e:74:91:5e:89:2d:1f:f0:6a:9a:dc:bf:99:71:9b:fa:69:a5:
46:e9:0e:d2:07:93:b1:e6:70:6f:21:7a:66:53:f4:08:06:db:
66:ef:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:49:05 2025 by rpki-client