Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: yOdCbIrWN8LkSu63yAS2kcygII9s4gCmPlMFkftIIes=
Subject key identifier: 90:CE:F1:7D:95:26:C0:20:EC:DF:EE:F6:D1:23:ED:80:0B:19:F6:BC
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 0198D73AF138EFE1BCE2CB1A06041DA18018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 1476
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: dTrLWsPHcx75lEITIpe+JNvnfQ5vAtOfsZORjD1+gN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f1:38:ef:e1:bc:e2:cb:1a:06:04:1d:a1:80:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=90cef17d9526c020ecdfeef6d123ed800b19f6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:7b:77:0e:58:22:4e:64:4d:62:9a:3c:e9:
2b:03:7e:d9:49:99:78:0a:b8:af:91:76:0a:75:59:
a3:9b:b4:fd:9e:58:2a:d4:44:04:a8:c4:81:37:a8:
cd:1a:65:22:fe:34:65:53:2c:97:9f:a1:36:7a:82:
b1:73:4e:6d:fe:64:4a:00:b9:e1:83:7a:d2:67:d6:
01:a4:44:a7:17:1b:9a:2a:49:e2:fa:79:23:b6:52:
27:fd:64:0c:c1:fa:71:f5:15:de:7c:d7:4a:2d:bd:
8d:16:e6:7a:b1:36:68:ce:ad:e2:0a:73:6a:a6:dc:
77:3b:af:df:62:9e:d5:aa:91:9f:d1:6e:8f:ea:c2:
66:e4:d4:0c:d6:c4:1b:ee:af:39:31:6e:d3:10:f0:
24:8e:05:3c:f4:7b:74:0c:e7:2e:50:89:0d:af:e4:
b1:24:e7:1e:15:19:a2:0e:a6:0f:c4:f7:6a:9c:43:
35:8b:13:e0:78:99:09:b5:24:26:6b:a5:47:12:bc:
44:7b:1d:73:73:2b:8d:78:92:18:84:ec:28:59:f3:
41:47:74:08:41:64:1d:d6:ce:d7:1b:9f:45:aa:26:
45:0b:c7:51:6c:29:f9:17:a5:fc:0f:b8:dc:ea:86:
9d:2d:8a:03:c2:19:a8:ed:23:4e:c5:14:07:e4:97:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:F1:7D:95:26:C0:20:EC:DF:EE:F6:D1:23:ED:80:0B:19:F6:BC
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:a3:0a:94:29:03:8e:39:ff:d2:ce:09:99:ac:a2:5c:7c:
c6:9a:59:71:45:63:c8:72:92:5c:4d:6d:9c:a6:ef:31:16:32:
f2:eb:a0:da:e7:34:36:88:09:9e:5c:73:f2:49:0a:9d:cd:a6:
6f:7f:48:94:c6:a5:62:fc:d5:e6:7e:d3:f9:34:e0:29:30:45:
78:24:8a:20:9e:dd:63:f8:15:84:f4:ff:53:a1:13:fa:03:c7:
b6:46:8a:b0:8c:3a:87:29:26:c0:ff:04:3a:45:bd:3a:a7:c8:
50:39:e8:e1:fe:53:c9:f0:ec:52:be:57:c2:dc:b2:e5:f2:80:
91:55:3a:4a:95:e4:cd:11:6c:f3:b7:5b:68:f1:f0:85:f5:09:
d1:2f:45:54:7f:5e:24:3d:7b:f7:56:ae:3f:52:7f:ea:48:2e:
cc:08:a5:ba:c6:f4:5e:eb:2c:95:4f:49:42:12:5d:0c:7f:c5:
7d:81:1b:94:2a:02:f1:4e:6c:15:9e:18:9e:5c:f1:85:85:49:
5e:70:0c:2e:08:cb:fd:1f:1c:97:75:20:88:c5:ad:b3:45:3b:
e6:08:c4:db:4f:0a:6d:02:95:63:a2:f1:20:19:d3:a1:ae:cc:
8e:70:00:20:8e:88:74:78:9f:bb:3a:d1:3f:21:24:68:57:63:
9c:57:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:53 2025 by rpki-client