Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: Ng/60VfPy6Fx8XvWP/1xee6PNNVZd4teLpf6hBeCVpo=
Subject key identifier: D5:6C:16:A2:EF:A9:8F:D7:F4:3C:7D:30:73:1F:A5:38:0C:99:7A:FF
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 0198D6CD4D322B72A144411F1A9FD1756F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 098E
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: 8zrqCDSyUSOVEJEVjPFYSX7j0XnaMHqTCTltMJcbY38=)
2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4d:32:2b:72:a1:44:41:1f:1a:9f:d1:75:6f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=d56c16a2efa98fd7f43c7d30731fa5380c997aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:68:6d:58:c0:58:ba:fc:5e:cb:15:13:b6:
61:7b:80:43:44:5e:46:a5:dd:d7:9c:b5:6e:2d:bf:
fe:8e:6c:00:c7:80:b2:ae:8b:43:a5:9b:43:7c:75:
b4:b0:0a:90:92:b4:05:db:ac:ba:70:1c:32:76:dc:
9d:47:d0:2d:38:18:d3:11:56:f8:1d:4e:4b:64:1e:
48:cc:80:dd:88:4a:4c:cb:9f:de:dc:3c:ba:49:c8:
d8:cf:37:a4:e5:5b:88:ec:fb:b5:2f:3b:f4:65:01:
c4:f3:4c:78:38:43:8b:72:23:82:03:31:5f:38:ae:
30:51:eb:16:46:94:5d:c4:b6:1f:17:1f:78:7b:bf:
31:3f:35:73:4f:5e:1e:9a:55:fc:81:e4:3e:e4:79:
9a:70:b7:e8:2b:31:00:95:8e:3b:9f:c0:88:c2:6b:
8a:c5:e9:67:91:89:eb:9f:ea:29:ae:b6:93:c4:0f:
d8:2a:75:80:bc:ed:14:62:0d:57:f4:79:67:8a:43:
7c:28:7f:75:35:c7:2c:6b:37:75:4e:cf:df:bf:a5:
51:fc:b2:d6:ac:be:63:ae:1f:46:98:17:db:a7:9f:
2a:4a:66:67:9c:67:9d:2e:ee:27:c0:e6:46:a1:6f:
b9:4f:35:b5:51:12:f1:a7:fe:64:7b:48:29:ec:72:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:16:A2:EF:A9:8F:D7:F4:3C:7D:30:73:1F:A5:38:0C:99:7A:FF
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a0:52:89:3c:7c:f2:67:2d:ab:50:20:1d:b1:fb:10:74:e1:
fc:19:bc:60:71:82:b7:a3:c7:df:03:b7:81:9f:dd:73:37:9d:
fd:9c:3b:45:15:b2:64:78:e5:ac:6b:a6:db:a4:ed:81:52:a9:
4d:a7:cc:8d:97:b2:f7:75:e9:3c:cd:2b:e0:a3:a7:fa:5d:fb:
3b:46:82:68:b3:12:e7:aa:6d:b5:df:8d:97:3e:b7:cf:db:fa:
b1:3b:04:83:a0:bf:f8:42:fc:4b:06:3b:23:8c:01:04:80:f3:
c9:78:63:59:a1:e3:b6:8b:17:0e:ae:14:cc:cf:1b:76:f6:40:
55:de:c3:20:4a:58:5f:cb:80:cd:18:5c:5b:dc:ba:27:0f:a8:
bf:1b:89:e5:be:5a:f2:8e:58:16:ca:7c:72:b4:56:c8:a4:e3:
59:86:c1:3a:3a:c9:31:94:61:37:f2:59:a7:19:d4:8b:0a:f0:
c3:9f:23:4e:9a:5b:ff:90:14:64:4d:73:78:6e:e9:0f:82:f3:
e6:d8:2b:f3:ce:9c:4c:ac:95:42:81:4e:ad:1b:1a:2e:03:33:
0c:ae:f2:42:34:bc:9c:e1:31:5d:5d:ba:9f:5e:b2:49:2c:66:
b4:a3:7c:1e:81:39:09:1f:f6:08:b6:a9:e5:e6:e2:5f:b3:18:
1c:1f:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:44 2025 by rpki-client