Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: VlXQWCGScMCvxJ5R/ioXQrU/2Y4RcifStps1ks4uJDo=
Subject key identifier: 42:21:39:A8:90:90:FE:36:F8:1B:4B:A4:59:03:53:54:B1:B5:2B:D2
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019844E3EE0D97A5FB6C89EF37211B8C8695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 0FDA
Signing time: Sat 26 Jul 2025 04:00:44 +0000
Manifest this update: Sat 26 Jul 2025 04:00:44 +0000
Manifest next update: Sun 27 Jul 2025 04:00:44 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: h6kk5/v1awwKKYecCpQVs/15zZbHSXhfn7SCYawVGSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:ee:0d:97:a5:fb:6c:89:ef:37:21:1b:8c:86:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Jul 26 04:00:44 2025 GMT
Not After : Jul 27 04:00:44 2025 GMT
Subject: CN=422139a89090fe36f81b4ba459035354b1b52bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:3e:f9:26:7a:d6:68:44:8e:81:81:da:b2:
f3:a1:b5:3d:39:79:13:a8:b5:23:67:85:55:c9:1a:
1a:00:b1:22:2b:fc:e3:63:fc:4c:4e:80:06:2d:80:
4a:d8:ac:a7:53:e5:90:53:e6:77:c7:e9:9b:53:a8:
a9:fc:4a:34:f0:f7:d4:d0:6a:b0:ed:e8:39:24:46:
d2:35:3a:15:b4:70:71:d0:6b:e5:d5:30:ca:73:51:
ef:97:b9:09:a7:64:5b:21:86:2b:a8:1a:12:08:2b:
fd:c6:04:64:18:f8:da:8d:2a:f4:c3:aa:49:7c:23:
0b:f1:19:f1:c3:c4:f8:eb:81:0a:58:ee:a0:cb:61:
7c:a5:a8:b3:e3:d2:90:74:dd:5e:f5:b3:80:30:ab:
2c:34:38:a9:ea:8f:f5:47:25:cf:5e:c6:d6:68:35:
e0:a2:1b:7f:22:53:78:6b:9c:d9:55:d8:81:9b:f9:
4d:21:1b:07:2a:a6:17:e5:07:7d:13:77:e6:34:70:
33:7b:1b:13:bc:fa:1c:80:84:7a:7a:5a:90:75:53:
c5:ca:af:7e:0e:54:aa:b0:50:7d:f8:b1:ce:4c:a6:
60:e3:d7:02:1a:46:50:4a:77:f5:c7:e4:6e:b9:31:
5b:d5:25:7e:c0:4c:99:7e:c5:73:b9:a2:21:4f:ee:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:39:A8:90:90:FE:36:F8:1B:4B:A4:59:03:53:54:B1:B5:2B:D2
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:60:c1:90:45:3f:cf:f0:89:20:42:85:3e:56:84:8f:90:d9:
15:22:17:aa:61:11:b4:27:ef:c3:62:ac:d9:ac:40:c7:ca:52:
38:57:7e:39:58:07:06:6a:ce:ec:e6:41:7f:29:7b:b0:f7:08:
36:89:27:ea:8a:d8:c0:75:1d:50:2d:a8:41:97:9e:99:42:70:
00:28:a0:39:c1:d6:66:96:29:eb:95:3d:30:62:49:ea:8a:a9:
9c:55:79:31:c1:96:bb:84:e8:46:8c:6b:a0:7e:3b:3d:cc:28:
70:1e:54:d8:f7:4b:09:19:62:80:24:49:1e:01:ba:00:4e:44:
60:75:c5:ef:48:e6:22:03:4e:c7:cc:ba:65:ee:4d:7b:81:d1:
59:0c:a7:f7:d7:5f:da:06:cc:14:52:f0:d7:97:49:45:60:11:
15:fd:7a:ff:62:49:74:d8:0c:eb:0a:3a:ba:67:32:b8:e5:bf:
eb:0e:95:74:a3:8c:ef:ab:68:46:c8:9d:a1:53:63:a5:df:d4:
78:cb:e1:10:e7:9b:d3:28:32:af:7a:23:66:c3:36:5e:2e:a7:
0e:93:32:e7:60:d6:0e:0d:4d:46:ef:b3:e7:9e:05:41:36:cb:
bd:0d:03:d8:8a:95:d0:99:32:e1:50:d4:45:99:76:82:2f:77:
86:07:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:30 2025 by rpki-client