Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: nPdQgiaSXXbbN2iZi+xM6A0SQqq2VDoOqwTovFmv34o=
Subject key identifier: 63:EB:C2:17:22:94:9B:C2:FA:34:97:62:47:4A:85:42:83:9A:F6:88
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 0197B70E8E86DAAC9FC4890BBC0A5B6BF01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0B8A
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: 836LZLKzvWeBG63dek6+lVHkOMaotpuUj51duYk0PBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8e:86:da:ac:9f:c4:89:0b:bc:0a:5b:6b:f0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=63ebc21722949bc2fa349762474a8542839af688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:2e:29:93:e5:49:6b:2d:86:ae:6d:ed:45:
54:d4:02:f9:d6:20:f4:a4:b8:5b:23:21:cd:f3:c9:
bb:e3:14:0e:1f:cc:ac:28:a7:e7:a3:28:0d:dd:bd:
3d:1f:8a:1f:ff:c6:f8:06:ed:1d:1e:ee:85:fa:e2:
b5:be:9c:a8:77:18:ac:2e:fb:15:1e:6c:d4:50:e5:
a9:d4:ab:2a:75:c7:47:b2:e2:3c:12:68:69:69:da:
33:af:02:a2:81:a8:bf:dc:45:02:a7:30:44:0f:19:
95:98:93:af:f1:fb:a6:e6:23:5a:d6:af:a4:14:93:
98:67:b9:10:de:66:92:89:2d:51:ea:2a:c4:c1:c8:
af:9c:8b:f3:10:7e:bd:17:01:3d:87:49:de:cb:7d:
d1:1d:00:cb:92:48:53:1f:30:b9:7a:95:a3:e8:bd:
7c:ce:a4:99:84:a8:89:b3:bf:cf:74:27:fb:ae:18:
80:1d:5a:04:f0:b1:88:86:fb:2c:5c:d1:07:4e:6f:
9d:8e:77:5e:d9:eb:ec:a0:56:48:15:4c:f6:52:63:
a2:4e:ff:c4:6a:87:c7:66:15:a1:ca:76:22:90:d1:
6c:28:96:83:59:69:d2:99:5f:b6:06:84:e3:e8:8b:
60:41:d3:ac:d6:ed:89:b5:c7:53:0a:14:df:9b:45:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EB:C2:17:22:94:9B:C2:FA:34:97:62:47:4A:85:42:83:9A:F6:88
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:5a:ba:f8:50:8e:a3:07:4d:d5:1e:f7:4e:d1:61:68:d9:
7d:cc:3d:eb:35:8d:02:9e:bd:cd:49:c9:a4:9f:e2:e2:8d:99:
d5:f0:7d:80:15:d2:12:14:70:64:b2:44:f7:b2:b3:8b:18:ac:
b9:67:94:eb:5c:43:82:64:00:0f:5d:48:e6:2d:af:96:cf:76:
4f:a3:09:2f:62:50:ba:42:59:9d:73:10:87:a7:96:fa:1b:82:
4f:79:74:a5:c4:0c:c7:8f:29:17:e6:c8:0d:71:0c:bb:9e:b1:
9b:38:c9:8a:8b:3d:e7:de:4a:2b:4b:92:02:05:9e:4a:8d:05:
03:6e:dd:0d:8b:bc:97:72:2b:0b:5b:83:de:bc:d5:8a:de:1d:
96:06:84:1d:87:b2:29:ac:da:76:2e:ce:39:43:e3:07:51:e2:
16:1a:3a:9f:3f:a5:df:b5:4c:32:21:5a:a8:13:31:ad:db:00:
67:d3:e7:4e:7e:1a:0b:fb:7b:3a:80:b1:63:36:6d:a2:0e:59:
4d:bd:5b:6e:34:3c:c2:9e:76:9e:0b:d5:1a:a7:ac:24:bb:76:
b1:6f:fd:a5:d7:bf:b3:fc:6c:9a:ee:d2:54:63:2e:59:84:b6:
09:04:a8:4d:0c:b5:b7:38:ae:5d:a4:88:56:ad:7c:35:ce:af:
01:4c:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:27 2025 by rpki-client