Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: WTOcF85sBrHE2ah9KgcZymG48hqvKe4gCKIzhFJJg9I=
Subject key identifier: D6:E9:DF:6C:AF:92:67:60:63:F0:88:BA:50:F5:B6:94:CC:71:2A:BF
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0198D4E0224EC7344BB0BC51BBB54C0C8CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 15CB
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 61cwi37z85d9Ky6CIPbP1GJE4/O3iop5nyFdiEm6uoU=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:22:4e:c7:34:4b:b0:bc:51:bb:b5:4c:0c:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=d6e9df6caf92676063f088ba50f5b694cc712abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:50:f9:a9:0c:3e:af:5b:dc:28:86:57:df:
4a:b5:bd:4c:21:95:06:5b:df:c8:5d:36:1a:a8:86:
16:c9:1e:c1:87:7c:33:34:46:55:b1:32:36:b6:2f:
8f:3b:a9:ab:1c:a9:3d:ba:bb:75:a9:f8:ac:9d:d7:
30:16:89:e0:d4:95:a0:6d:4d:57:1c:fb:82:60:fd:
d5:93:62:99:4d:4d:ac:75:78:16:62:68:17:17:d8:
65:ac:41:dc:56:3c:c5:f7:f8:97:34:e5:52:5d:2a:
3d:38:51:3a:34:1f:82:ac:42:bf:f8:4d:9e:0a:01:
4d:9f:31:d7:92:0b:a4:41:0a:1e:bb:12:20:a6:a6:
b9:2d:a5:07:fe:2c:1a:4a:91:6c:28:b1:2a:47:c7:
e8:8b:fe:cf:b3:50:1e:11:95:a8:aa:67:50:83:7a:
5f:ba:35:fb:a4:f3:c8:43:32:80:79:26:83:8c:aa:
7d:9d:2a:58:43:2e:d9:34:f6:cf:94:7c:c7:83:f5:
e4:e3:fc:88:0f:81:bf:4a:d8:0e:1e:25:39:8b:4e:
47:e7:a3:b7:33:dd:8f:71:d3:b2:7f:55:39:44:0d:
e0:0f:cd:f1:86:15:97:ea:04:e7:90:3a:ba:b9:3a:
ae:5e:be:fa:3e:02:d4:47:3b:18:1f:52:f2:b7:f6:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:DF:6C:AF:92:67:60:63:F0:88:BA:50:F5:B6:94:CC:71:2A:BF
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f5:50:de:4a:a2:7b:8f:61:8d:03:44:fc:07:4d:9c:0a:8a:
c9:a7:6e:f3:b8:da:9e:13:c0:08:eb:5c:da:6e:2f:37:c6:92:
b7:f1:33:04:76:92:17:a0:4b:6e:bb:0a:aa:c1:63:1c:c6:fc:
1c:d8:0d:bd:63:8b:b3:d5:4a:00:63:31:dc:1e:40:55:04:35:
de:43:ea:8d:cc:7b:4a:a4:d3:ff:4c:bb:55:5e:fc:58:99:6a:
1b:1e:61:0f:1d:f7:72:42:b7:ce:3d:f4:90:77:e4:fc:9c:22:
10:28:e4:15:72:6c:48:74:6d:48:9c:cc:c9:fb:05:75:9d:9c:
ee:c4:b6:a2:d2:32:af:8e:e9:ce:2d:0e:0c:7e:cd:6a:83:c4:
e9:8a:8c:1e:64:4c:1b:40:d1:9a:c2:cc:68:6a:a6:0e:bb:94:
09:d2:b2:ac:1c:e2:27:a1:36:73:ef:0f:0d:94:81:3f:a8:45:
59:57:9d:71:33:7b:34:cb:7b:0f:14:be:90:ec:00:0f:51:86:
5e:fb:2e:aa:aa:5d:b0:be:87:b6:a3:dd:8e:6c:00:c2:cb:f5:
b8:1c:b3:50:3e:37:9a:a9:7b:1d:3f:f0:9e:5c:56:58:08:ea:
7e:1a:fe:31:cd:82:80:e5:a9:d5:5b:f1:8c:06:e6:30:59:b7:
f1:ae:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:27 2025 by rpki-client