Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: y1zJWcXNERWLtczfQuWY9WAtEjStlJQrnweQm/GZDeQ=
Subject key identifier: 37:D7:03:39:8B:4C:50:E2:D0:9A:03:3B:88:6D:F8:B8:55:EF:70:C8
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 0198D6CCFC1CB3B9165C2417AE5B2E0F0916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0C1F
Signing time: Sat 23 Aug 2025 12:00:14 +0000
Manifest this update: Sat 23 Aug 2025 12:00:14 +0000
Manifest next update: Sun 24 Aug 2025 12:00:14 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: x8WHa5UAfs7vF8kJoPXF7QhrEIguVEmv3JWEgyX051s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:fc:1c:b3:b9:16:5c:24:17:ae:5b:2e:0f:09:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Aug 23 12:00:14 2025 GMT
Not After : Aug 24 12:00:14 2025 GMT
Subject: CN=37d703398b4c50e2d09a033b886df8b855ef70c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:fc:86:e7:66:a4:b4:f2:e5:0a:ab:7c:97:
39:ac:b5:d5:5c:34:dc:24:bf:23:15:f6:b6:cf:b1:
f4:71:4a:9f:55:de:d1:aa:1a:ad:0c:2e:99:a3:92:
df:d2:ca:93:16:a4:3f:ac:29:9c:e6:23:cf:94:e1:
8b:3a:cc:82:a9:ef:f9:0e:a6:31:39:62:96:1e:dd:
5a:73:54:c1:f0:cd:88:00:48:10:39:f5:54:19:db:
cb:8a:56:99:30:5f:0a:f1:aa:f5:77:ea:6e:70:be:
8d:a8:5f:65:7f:da:f6:9f:7d:71:61:3d:1d:12:05:
65:9d:fe:a6:89:1c:01:b8:c1:57:1d:59:62:82:46:
59:ea:8f:c2:1e:e8:4f:35:db:34:f4:4e:7e:f1:f7:
17:96:a3:43:be:fa:c3:9f:5e:9a:69:37:01:70:06:
1a:4a:4a:7e:47:64:08:d6:cc:d5:f4:e6:5c:7a:85:
9a:d1:d9:06:91:5c:e9:c5:28:a3:2f:a8:16:e9:53:
28:93:8b:59:99:cf:ec:6e:9c:53:74:84:49:88:ae:
19:b0:d0:d1:31:a9:63:cc:e5:90:70:71:10:11:5b:
54:ef:be:95:9a:ae:71:31:e5:1a:3c:80:45:df:63:
c4:d6:7a:46:73:7a:25:3c:f1:85:80:49:a8:42:92:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:03:39:8B:4C:50:E2:D0:9A:03:3B:88:6D:F8:B8:55:EF:70:C8
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:e0:39:4b:dd:5e:cf:40:50:0f:56:c0:a2:d7:59:91:a4:
8d:c2:aa:d2:0f:87:55:d3:51:80:e0:f5:f9:86:e1:f6:5f:f0:
e1:d2:70:d9:d6:ad:9d:9e:c9:fe:56:74:41:8e:19:ec:4d:d1:
29:59:30:df:57:2e:05:e8:40:4f:07:91:16:71:45:c5:bf:bb:
bd:d4:8f:2f:72:61:2b:e5:90:cb:b3:ee:e2:02:bb:9d:a3:80:
b5:61:df:86:b1:8e:a7:bf:97:88:8d:89:33:56:a4:c6:11:f1:
9b:5d:a0:16:8a:88:23:b4:08:b0:c6:a9:62:97:54:93:22:ef:
75:3b:b7:49:fe:06:1e:46:ad:a4:fc:ff:04:72:70:98:a7:d0:
cb:d6:87:86:9d:11:57:54:41:51:8c:24:65:59:90:6e:3a:29:
80:5d:ab:a3:ae:5b:06:cc:ef:3a:c3:f4:11:4d:39:5b:0b:e3:
b5:2d:40:23:f9:fa:ee:44:83:03:e7:e9:8f:60:f4:58:30:32:
64:b1:39:0c:0b:2e:4f:2b:1b:8a:60:4b:2f:67:75:4a:55:1c:
37:d7:bf:7c:64:48:27:fc:04:89:4b:5c:06:a5:42:1c:d7:d2:
22:83:3f:9d:3e:3c:b0:ac:17:62:d5:ab:89:47:bf:de:90:ab:
54:31:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:37 2025 by rpki-client