Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier: POOjwm9jTjs757RMAc0I/YYn54v+/43R4OhscS2iFdM=
Subject key identifier: 29:01:55:15:5F:32:96:43:4B:34:BB:C2:A9:BA:DC:55:12:5C:1C:0E
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 019833B9A83CD7DA9ADD2A95ED023EA99372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number: 0F6C
Signing time: Tue 22 Jul 2025 20:01:01 +0000
Manifest this update: Tue 22 Jul 2025 20:01:01 +0000
Manifest next update: Wed 23 Jul 2025 20:01:01 +0000
Files and hashes: 1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=)
2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: R9uQsqWAhhS+b/wrYv8bRaHzkOT8CzTvuaNPccbFFPI=)
3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=)
4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:b9:a8:3c:d7:da:9a:dd:2a:95:ed:02:3e:a9:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Jul 22 20:01:01 2025 GMT
Not After : Jul 23 20:01:01 2025 GMT
Subject: CN=290155155f3296434b34bbc2a9badc55125c1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:41:96:97:b0:0a:09:96:34:c3:eb:37:8d:
a9:91:6f:90:16:6e:d2:ea:dd:c4:60:f8:77:13:b5:
96:76:6b:66:af:ba:d3:b3:78:ac:09:99:f8:37:7d:
d3:05:2a:15:29:f2:2b:33:b2:47:d6:31:53:39:ed:
9d:e4:00:18:f4:82:52:cb:f9:06:ca:92:f9:49:10:
30:67:67:2c:37:02:f8:3b:bf:20:22:25:1d:82:8f:
9e:37:ef:a3:18:ec:f5:d7:59:3b:ab:c6:00:ce:d7:
13:23:7b:64:e4:fd:d6:ad:7a:84:6c:30:58:ca:e8:
ec:9f:6e:0a:9c:ca:a5:c9:8e:97:a0:43:d5:06:f4:
6a:24:0f:16:e3:06:c7:d6:1c:1a:5b:75:15:ba:b3:
76:71:ee:86:e8:4f:bf:67:e8:98:54:b2:f1:bf:e0:
0f:f1:69:ce:a9:18:fd:52:c0:52:5a:53:d3:14:fc:
d5:78:ef:ae:0b:99:ad:d8:68:b1:e9:73:6b:30:a4:
97:f1:04:b7:b9:43:f3:80:a2:0f:5e:ac:66:5f:60:
af:d6:e3:7e:c7:cd:4a:6b:5a:0d:d7:5b:e1:dd:02:
75:bf:59:cd:48:23:38:21:e5:c8:95:44:be:96:8f:
34:91:dc:c1:2d:1e:d6:99:24:eb:3b:85:6c:9a:1e:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:01:55:15:5F:32:96:43:4B:34:BB:C2:A9:BA:DC:55:12:5C:1C:0E
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:5e:27:9d:74:82:cb:ed:d1:a3:6a:be:4e:12:35:2f:bd:
a8:3c:19:11:a2:1a:06:6a:20:55:db:0d:c8:e5:86:26:c4:62:
a0:3e:89:ea:52:2e:89:6b:e7:d9:f0:d6:2a:27:89:53:61:14:
27:75:01:99:f5:ea:e0:da:a3:18:a1:e5:1e:c2:f3:e3:d2:bf:
37:1c:67:24:8c:8c:9e:80:7f:e8:05:3e:f4:fc:f4:87:63:58:
f1:49:2d:d1:b9:5d:16:0b:4f:65:f0:68:81:96:54:02:d3:41:
d0:97:01:4e:2a:ec:38:f7:9d:74:e4:e8:4e:4f:27:87:94:9f:
41:d5:03:d8:23:2d:f5:b4:4c:d0:70:81:c4:98:b1:e7:43:03:
15:83:59:86:2b:bc:f0:64:16:78:e4:ea:73:e0:42:3a:f1:dd:
1f:dc:e7:5e:e8:cb:72:69:1e:61:26:2e:5d:a1:d6:48:61:0d:
4e:fb:76:21:a4:df:c2:65:1e:8a:91:13:b2:2f:46:f8:a7:3e:
88:99:a9:ea:fd:df:48:fe:e7:e8:d7:57:19:cf:a7:62:ca:d5:
0c:aa:64:db:2b:9f:6d:8c:2c:48:b6:1b:b6:ee:5c:08:74:80:
ec:e6:1d:2f:dd:ac:8c:b9:a3:6c:9f:bf:d4:1d:0b:b2:9b:66:
96:e4:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:50 2025 by rpki-client