Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: JujzPn6uiLc1ojP/qLPASP/eGz7Z9vhTuLhPezosjaY=
Subject key identifier: FC:BB:91:BD:72:26:7E:50:2E:09:07:62:F9:AF:F1:6C:95:DC:A9:D5
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019849650027185ABFA5789DCFDD00CB843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 03D5
Signing time: Sun 27 Jul 2025 01:00:12 +0000
Manifest this update: Sun 27 Jul 2025 01:00:12 +0000
Manifest next update: Mon 28 Jul 2025 01:00:12 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: oTb5GDoJHc2DdDIKpC1O94G1BoOVa022AT9/c+Iy58A=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:00:27:18:5a:bf:a5:78:9d:cf:dd:00:cb:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jul 27 01:00:12 2025 GMT
Not After : Jul 28 01:00:12 2025 GMT
Subject: CN=fcbb91bd72267e502e090762f9aff16c95dca9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:0c:78:77:59:17:41:a0:49:09:33:9b:41:
ea:14:ec:99:a1:a4:1e:df:de:7f:10:db:9b:16:9d:
e7:d7:bd:02:0a:83:5e:44:ad:fd:32:e4:ef:8b:53:
da:e2:60:76:aa:6a:53:72:0a:3e:22:f3:d6:1a:27:
1f:48:f8:20:9c:ba:fe:91:ab:8e:ad:72:7b:72:63:
22:e7:39:0b:e5:dc:da:a6:e5:06:ae:75:6e:65:00:
2e:8e:eb:ba:a0:89:66:28:92:31:c6:19:6f:d8:04:
83:1e:19:a4:62:ef:65:87:7d:80:0c:57:53:9d:23:
82:bd:98:82:4d:31:eb:36:4d:86:2a:da:48:c9:91:
5f:24:79:f4:10:db:27:c0:fc:8d:01:e2:dd:78:d5:
cb:98:dd:a5:8d:b0:7c:09:ec:e4:eb:84:56:59:ab:
65:44:a7:60:04:d9:09:4c:88:cc:a7:dc:ba:1a:1b:
90:38:f7:cc:71:85:aa:7f:ab:7a:06:ab:3e:b1:b3:
27:e3:f4:d3:a0:af:ab:9c:65:13:97:b1:46:f7:0f:
b2:a2:8b:01:0e:89:17:7a:c9:40:8b:cf:75:17:99:
24:48:ac:6b:ad:58:36:38:37:9c:be:c6:f1:5d:15:
23:1b:55:d8:3e:cf:d5:ec:fe:40:c6:3d:1d:6b:8d:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BB:91:BD:72:26:7E:50:2E:09:07:62:F9:AF:F1:6C:95:DC:A9:D5
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:29:b6:ec:59:0d:57:90:76:43:21:a2:c7:1d:e5:ee:c4:
aa:ab:02:23:b1:cf:3e:84:69:1a:87:6d:5f:66:4b:ce:f1:30:
c5:4d:38:e0:4a:86:7c:f9:87:0d:14:6d:2d:7b:7e:b9:78:9b:
02:ba:9a:30:a9:c2:db:9e:de:19:91:79:6e:6d:c9:15:f5:c6:
fb:c0:54:0d:a8:e3:22:dc:86:6a:12:95:7b:f0:c5:dd:d2:9b:
df:81:87:69:e2:74:cd:be:1f:24:93:da:62:34:45:f6:c3:69:
46:89:e1:9a:2a:c3:e5:dd:43:ce:b4:2e:77:5c:df:d2:e3:0e:
ac:96:d8:b7:ab:f8:f5:2f:16:d5:bd:11:ae:0b:5a:1b:f8:53:
3f:49:5f:36:09:eb:b1:3e:77:94:72:e7:c2:02:a5:6d:bb:52:
25:12:06:a8:a8:93:23:66:a2:23:cf:7d:f9:fd:49:ea:e7:54:
6a:2c:0c:83:78:b9:52:da:3d:b8:a0:f2:54:a6:5e:7d:ad:b5:
a3:89:07:d1:ef:1b:a0:66:3b:f7:03:75:04:6a:cf:61:1e:0d:
1f:af:11:1e:40:48:0b:e5:7c:b4:89:7d:d9:fa:f9:fd:5f:53:
47:0c:cb:ed:84:f7:74:f6:9a:3c:bc:68:0c:0a:f9:b5:08:29:
f1:03:37:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQAnGFq/pXidz90Ay4Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh
ZDhkYTIwHhcNMjUwNzI3MDEwMDEyWhcNMjUwNzI4MDEwMDEyWjAzMTEwLwYDVQQD
EyhmY2JiOTFiZDcyMjY3ZTUwMmUwOTA3NjJmOWFmZjE2Yzk1ZGNhOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LAMeHdZF0GgSQkzm0HqFOyZoaQe
395/ENubFp3n170CCoNeRK39MuTvi1Pa4mB2qmpTcgo+IvPWGicfSPggnLr+kauO
rXJ7cmMi5zkL5dzapuUGrnVuZQAujuu6oIlmKJIxxhlv2ASDHhmkYu9lh32ADFdT
nSOCvZiCTTHrNk2GKtpIyZFfJHn0ENsnwPyNAeLdeNXLmN2ljbB8Cezk64RWWatl
RKdgBNkJTIjMp9y6GhuQOPfMcYWqf6t6Bqs+sbMn4/TToK+rnGUTl7FG9w+yoosB
DokXeslAi891F5kkSKxrrVg2ODecvsbxXRUjG1XYPs/V7P5Axj0da41iVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy7kb1yJn5QLgkHYvmv8WyV3KnVMB8GA1UdIwQY
MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt
NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz
LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvYptuxZ
DVeQdkMhoscd5e7EqqsCI7HPPoRpGodtX2ZLzvEwxU044EqGfPmHDRRtLXt+uXib
ArqaMKnC257eGZF5bm3JFfXG+8BUDajjItyGahKVe/DF3dKb34GHaeJ0zb4fJJPa
YjRF9sNpRonhmirD5d1DzrQud1zf0uMOrJbYt6v49S8W1b0RrgtaG/hTP0lfNgnr
sT53lHLnwgKlbbtSJRIGqKiTI2aiI899+f1J6udUaiwMg3i5Uto9uKDyVKZefa21
o4kH0e8boGY79wN1BGrPYR4NH68RHkBIC+V8tIl92fr5/V9TRwzL7YT3dPaaPLxo
DAr5tQgp8QM3kA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:52 2025 by rpki-client