Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: uy0iXZldKxHFvtECew5kPAByMTHdjH2uxOnpMqpdxRs=
Subject key identifier: 1A:D5:FF:26:6C:2B:C2:52:7C:AD:8D:0A:B0:07:1F:FD:3D:5F:28:ED
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0198C75BC066A69310A2FF5D526D1438EE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 15C4
Signing time: Wed 20 Aug 2025 12:02:15 +0000
Manifest this update: Wed 20 Aug 2025 12:02:15 +0000
Manifest next update: Thu 21 Aug 2025 12:02:15 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 1dE7dI9EGNKL2PtYYqwdPPAhv0d3ipaz2W4uouv/OwQ=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:c0:66:a6:93:10:a2:ff:5d:52:6d:14:38:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Aug 20 12:02:15 2025 GMT
Not After : Aug 21 12:02:15 2025 GMT
Subject: CN=1ad5ff266c2bc2527cad8d0ab0071ffd3d5f28ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:b3:16:37:ee:72:32:a7:48:9f:e4:d8:38:
5d:bb:80:ad:0d:1f:60:24:8c:44:fd:1b:6d:61:7d:
4b:ff:1c:38:45:14:f0:21:9e:5a:71:98:9c:02:ee:
d5:3e:2c:cc:b2:ad:f0:69:57:77:f7:11:dc:67:d8:
f5:e1:25:ab:45:53:d6:e4:48:8c:6c:87:8c:3d:2f:
3d:80:39:92:61:28:6a:7d:f8:12:03:22:9d:e1:b9:
41:75:9e:d4:b2:1d:23:85:8a:82:54:22:21:3c:f1:
a4:d3:de:9c:3d:4c:2d:e4:93:f3:c1:91:56:22:97:
66:ea:ae:f0:49:a3:17:be:0c:54:3a:db:8e:a0:4c:
46:34:fa:ab:f4:13:50:68:5d:af:88:24:b8:40:12:
56:56:3e:75:b9:e5:a3:82:9f:f5:d5:0c:2d:3d:ef:
c3:51:9e:6b:60:75:21:68:f2:8e:14:20:bf:bf:99:
25:e4:c1:41:5d:9b:0f:ed:38:0e:27:15:00:42:64:
9d:c1:d6:49:0b:b4:9c:5d:1a:cc:06:1a:c8:98:34:
d9:e8:27:38:4d:44:ff:30:90:08:9d:4d:8e:b6:10:
b1:77:55:ff:d0:90:f0:e6:00:9c:e0:d4:48:1d:c6:
35:65:e1:6e:7a:15:8e:b4:e4:64:55:df:89:e2:e4:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:FF:26:6C:2B:C2:52:7C:AD:8D:0A:B0:07:1F:FD:3D:5F:28:ED
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dd:23:60:67:49:7e:6f:ba:fa:b8:9c:89:53:32:71:4c:6a:
84:a3:7f:27:55:8b:50:70:37:54:d4:77:0f:da:87:16:e9:9b:
43:97:a8:dc:65:8f:76:85:af:2f:6a:ef:30:e5:e0:45:ee:8e:
6e:86:63:70:fe:14:ba:25:91:6b:ed:d1:4e:8e:5f:de:04:a2:
f0:23:59:a6:33:f1:b2:f3:5f:b0:12:db:0e:c4:80:31:49:65:
ae:8d:6a:d6:4f:75:e5:80:47:0c:df:f3:2e:27:0b:13:cb:22:
f4:f4:0b:7d:b5:9c:1b:8a:9f:f6:a9:be:d5:90:03:5b:d2:22:
c8:76:61:5a:6a:6d:88:f1:18:46:06:ec:94:3e:af:c0:66:45:
ee:b7:6b:28:b2:6e:26:8a:ca:41:3d:f8:91:d0:22:76:a1:db:
3d:be:a8:33:0a:da:b5:c5:3f:e2:82:be:c0:73:1f:ad:0e:13:
0e:82:40:9c:f8:63:a9:c3:88:0c:2e:99:f2:09:c2:b4:77:42:
e3:8d:88:da:83:32:d4:a4:5a:a9:fc:14:80:53:43:cb:b1:25:
3a:50:7f:0c:5a:93:6e:72:09:a9:98:79:76:a3:59:54:53:ad:
b5:cc:2d:9e:a1:84:52:cd:0f:24:32:e8:1a:f3:78:9e:c0:36:
5c:07:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:24:40 2025 by rpki-client