Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: BfuQbCPzlNIezqjwYqSVEBuOKQDLshNW4C+QajhtPIs=
Subject key identifier: DC:C3:F3:34:4A:A7:8B:B2:C4:9B:C9:8E:DB:25:DD:31:6C:CB:B8:10
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 019938DF836E6B951DE8B857F3DC63F37E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 0F1B
Signing time: Thu 11 Sep 2025 13:03:16 +0000
Manifest this update: Thu 11 Sep 2025 13:03:16 +0000
Manifest next update: Fri 12 Sep 2025 13:03:16 +0000
Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: 1gB/HcMpX3iPdhAPGM4QIWODRDszpixyKAzvyljr+Nk=)
2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:83:6e:6b:95:1d:e8:b8:57:f3:dc:63:f3:7e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Sep 11 13:03:16 2025 GMT
Not After : Sep 12 13:03:16 2025 GMT
Subject: CN=dcc3f3344aa78bb2c49bc98edb25dd316ccbb810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2c:d8:0e:0b:63:ed:c7:04:d3:59:08:47:fa:
6e:9b:c9:b6:30:32:b8:44:1d:66:5e:15:95:e4:9b:
9f:48:ea:d2:c8:a2:28:fb:af:32:67:48:fa:0f:4b:
63:24:a6:ff:0f:17:65:c5:7f:f8:da:2d:7e:5b:ae:
0e:fd:ec:42:d7:6a:7b:84:2a:2e:e7:ef:70:51:4e:
86:87:5a:64:12:6e:ef:fb:cc:09:bd:ce:be:69:41:
db:e9:22:72:b3:dd:41:db:c4:2e:59:40:59:3a:fb:
ed:c6:2d:23:85:61:f3:87:e1:28:c7:d0:52:b5:9d:
30:ea:16:17:3f:a9:62:a2:f4:d0:f7:a5:92:ed:f9:
65:ee:ec:86:b3:11:66:5e:1c:9b:66:ad:c7:64:ac:
16:8f:f4:d0:ba:77:86:79:28:e6:2c:f4:06:3e:d1:
32:05:76:87:03:dc:e2:d2:31:a5:98:f9:a8:1b:82:
3b:49:71:4d:0a:7f:86:c8:93:e9:9b:35:ad:85:71:
15:e5:fb:3c:4f:40:ae:bc:ec:32:d0:24:38:dc:13:
78:55:69:1a:da:36:66:3f:e1:d3:32:84:10:4a:eb:
d0:78:e1:02:c7:bd:7f:30:37:50:77:a5:f2:aa:3c:
a8:3d:b2:58:88:87:62:0d:6f:2e:1c:94:1f:49:e2:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:F3:34:4A:A7:8B:B2:C4:9B:C9:8E:DB:25:DD:31:6C:CB:B8:10
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:31:5a:c8:c2:6c:a5:30:37:7c:6a:87:6c:46:3d:6d:52:
b1:ba:87:3a:bf:4f:94:fc:9b:d2:4a:68:2f:a3:e3:73:af:20:
ff:82:09:98:e9:ed:6f:85:dd:6a:eb:a7:29:e0:3a:c6:a5:77:
0d:d4:78:b1:58:14:c1:a7:19:32:a9:8c:00:f8:38:ae:b2:10:
e9:b5:dd:27:44:8b:51:6b:b7:50:f2:b5:d2:bd:cf:93:70:d7:
60:db:9b:21:b4:bf:3f:17:c7:0e:cf:b1:80:c0:31:0e:3e:a1:
d1:2c:18:68:ed:c6:43:8c:b4:54:1a:fa:fd:8f:63:7a:69:89:
04:5a:cc:4f:51:1b:e7:56:f7:14:28:2a:b4:f2:eb:a4:92:e1:
d3:c2:bb:49:48:51:ef:16:09:4d:3f:09:f6:29:90:1d:7b:2d:
8e:1c:d8:94:5d:81:0f:f9:14:e2:dd:82:f5:1f:9c:52:3f:f6:
16:ed:10:5b:59:61:a8:b7:53:db:35:c9:f0:9b:d0:d6:fe:a3:
c7:a1:a0:d9:c4:a3:1c:f0:83:a0:22:78:d0:7b:59:83:c3:1a:
c6:ef:0c:4d:60:d1:84:a6:e4:3c:26:b5:e9:13:d6:03:a7:f9:
97:5a:3a:ad:36:da:8e:52:4a:72:50:04:1f:f0:1c:2e:e0:bf:
89:d2:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:21:38 2025 by rpki-client