Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: C2DgwXCeQmgS45IgrxBZy1bGABj0S1OJJL7maMCqHiM=
Subject key identifier: 48:DD:0B:57:55:4E:53:FA:2D:C7:7A:F2:4C:8C:0C:1E:97:5A:69:90
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 01992D46A6DBD52160C882CD9853DDBB0A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 1673
Signing time: Tue 09 Sep 2025 07:00:28 +0000
Manifest this update: Tue 09 Sep 2025 07:00:28 +0000
Manifest next update: Wed 10 Sep 2025 07:00:28 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: qDte92/SxxgmYq79zd6W+GabL9paS4tpk+iFGLtyP84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:a6:db:d5:21:60:c8:82:cd:98:53:dd:bb:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Sep 9 07:00:28 2025 GMT
Not After : Sep 10 07:00:28 2025 GMT
Subject: CN=48dd0b57554e53fa2dc77af24c8c0c1e975a6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:ad:52:2d:d5:cc:eb:04:6e:a0:88:b8:48:
91:01:ab:79:a7:7a:13:b1:60:61:80:5e:b4:f8:f5:
c9:b4:06:1d:ba:f5:be:5a:9e:af:9e:54:8f:2c:08:
d0:0a:12:58:33:2b:41:49:4c:7c:d6:8c:d2:20:8d:
dd:0a:a7:34:fc:e2:d5:85:fc:42:67:e0:4d:93:a6:
18:d8:9f:77:96:4e:a8:be:c3:de:01:3c:46:ea:37:
ab:2a:c2:0a:90:45:5b:97:7f:11:e6:a3:88:82:78:
41:80:28:ef:55:15:98:34:df:59:fd:61:8d:4e:99:
dc:57:af:72:ac:6e:6b:03:7b:5d:66:04:bf:77:37:
90:d2:96:84:33:e6:80:21:43:41:f3:da:74:f7:35:
e3:52:e8:b5:6c:27:22:ff:1a:51:3c:a5:eb:0d:03:
c7:0b:b2:29:8f:e3:6b:84:c8:b2:2c:de:f7:84:cc:
83:a8:11:d2:0c:d5:80:c7:78:8d:f6:9e:15:0f:64:
4d:38:fe:00:1b:67:e9:30:ad:6e:04:59:55:53:8e:
65:f2:3e:fe:81:4a:83:8a:76:81:15:f7:c0:55:c1:
87:e7:df:c2:cf:61:7e:08:4f:11:1d:4b:f9:aa:db:
37:f8:32:74:d5:c1:7a:c2:42:62:cb:b5:6b:a0:12:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:0B:57:55:4E:53:FA:2D:C7:7A:F2:4C:8C:0C:1E:97:5A:69:90
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:1e:a6:57:0a:8e:04:26:b5:9c:41:2a:67:7b:c5:8a:08:
73:a7:1d:92:03:4a:e5:f5:f5:dd:5c:99:57:80:05:e8:64:54:
a7:40:58:45:20:39:ca:e2:57:bf:59:cc:7f:b2:24:19:30:59:
19:72:50:b8:f6:d4:d7:93:66:9b:ff:b1:21:25:1d:27:20:c8:
b2:b3:d9:1e:bc:d3:c5:d9:92:56:98:c5:f0:1b:7a:d6:cb:dc:
1b:c6:5a:5a:1e:39:13:b7:2d:bd:27:56:39:6e:58:e3:a2:41:
7f:fd:b4:52:8e:d8:a1:10:dc:0b:99:fc:fe:91:87:0d:ea:02:
2d:db:a0:53:8e:da:2b:c2:ac:27:c9:da:77:2c:3f:c8:4f:4d:
10:78:8f:16:30:c9:79:2f:b1:83:3d:94:58:1a:50:09:5a:7e:
29:c5:6f:aa:29:60:36:c5:9d:56:1e:99:5e:cb:8b:b6:bb:76:
30:33:26:3f:e1:0f:2a:32:fe:1a:2d:43:6b:69:53:90:84:af:
c8:95:13:72:fa:a2:69:e2:04:eb:3a:60:66:7a:ab:d6:25:84:
b3:ae:fd:84:cb:2c:cf:a5:f2:4f:d1:45:71:dd:8c:37:d5:45:
6d:a4:11:11:c8:36:e5:df:d6:94:8e:66:e5:39:fd:42:02:60:
ea:43:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:16:27 2025 by rpki-client