Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: 767poyO3MrpVDdAIbwwnasxJ/+0rrDQLGo7lVQbS0SA=
Subject key identifier: 66:43:C2:AC:52:5E:FE:96:48:F4:3A:56:80:A9:61:33:42:69:E3:20
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019916F5B13939B4D676F02A0EC159E413B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 1497
Signing time: Thu 04 Sep 2025 23:00:24 +0000
Manifest this update: Thu 04 Sep 2025 23:00:24 +0000
Manifest next update: Fri 05 Sep 2025 23:00:24 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: 0utSbTf3uUdr1p948rhXqxZv6ADpx2rWGP95mRQCr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:b1:39:39:b4:d6:76:f0:2a:0e:c1:59:e4:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Sep 4 23:00:24 2025 GMT
Not After : Sep 5 23:00:24 2025 GMT
Subject: CN=6643c2ac525efe9648f43a5680a961334269e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:71:fc:9c:c8:50:6d:22:37:6f:f9:6a:0e:
91:a5:e3:d4:61:91:d4:6d:a0:d0:02:88:fb:4e:e9:
bc:bc:19:37:10:ff:f1:01:61:2f:21:7a:8a:83:79:
6b:a1:20:a2:7f:c9:f1:88:58:61:f1:a4:0e:d2:16:
ce:66:5d:64:e5:52:46:74:cc:a0:df:f8:d1:ce:58:
89:73:70:83:6f:b1:d2:e9:4e:a3:9e:0e:c6:a9:0a:
9c:13:9c:9b:91:90:d1:ca:f4:57:83:a4:c4:63:b1:
3a:5c:cf:1c:ab:ff:05:c2:2a:3f:00:fe:be:49:9c:
dc:de:2f:03:c5:1f:bb:bd:92:95:47:b3:93:67:7e:
f1:85:b1:9f:12:7a:47:2f:5a:db:88:f1:0f:64:38:
21:75:31:53:52:67:de:44:94:2e:aa:f3:59:c6:28:
2f:c3:7e:15:f7:f4:c5:4d:02:b5:9d:27:6f:be:e0:
9d:df:70:d4:0f:c1:45:0b:aa:1a:f4:47:ce:2b:ee:
bf:c4:10:92:d8:54:f6:f1:1e:56:a4:41:21:10:90:
22:03:35:dd:d1:de:dc:e4:5b:14:28:dd:c6:14:13:
f4:eb:eb:17:70:4b:74:2e:7d:2f:84:56:18:8b:a1:
53:65:5b:c3:d3:29:75:1b:f9:ff:b8:b0:d9:cc:6e:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:C2:AC:52:5E:FE:96:48:F4:3A:56:80:A9:61:33:42:69:E3:20
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:63:15:4c:48:bb:e5:93:d7:bd:d9:cd:a5:f5:de:78:80:af:
6a:51:cf:f6:c1:e2:1d:df:cf:9b:c9:1f:3d:39:c3:55:c2:a6:
e2:17:09:f4:34:44:d9:df:24:6b:3c:f6:46:18:fb:40:3f:8c:
bf:06:ce:a3:52:ec:e1:e4:ff:15:61:8a:70:0f:ca:22:d4:38:
1b:d6:76:96:18:fc:de:8e:50:69:a3:62:f3:db:92:fa:eb:7c:
c7:28:eb:37:d3:ca:03:0f:b7:a4:d0:af:a4:11:da:63:72:e8:
58:c1:e1:b0:0c:0f:ed:c7:66:ad:ec:cd:44:a1:98:0e:4f:aa:
ee:61:dd:ca:e5:be:9f:9e:00:e4:87:bf:c1:1f:27:6e:a1:2c:
e1:25:76:ca:3d:38:8b:e6:ff:10:44:63:5a:6e:7a:de:cd:68:
68:a2:d9:ea:23:7f:ce:fa:e5:93:f9:8a:f0:e0:f5:f3:80:fd:
f2:14:95:39:d7:98:16:73:83:d7:9e:e5:67:c0:ce:a0:45:df:
5c:d0:0a:f9:d3:e9:75:76:ef:66:24:80:19:d8:db:d8:a8:48:
ea:5f:be:ba:a9:fa:fb:79:2a:00:45:f4:cf:3f:d2:59:02:28:
eb:76:af:c1:de:15:3c:f6:ac:89:38:40:49:c3:12:81:12:22:
6a:dc:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:26 2025 by rpki-client