Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: pB7gv5pE7SDU5p0wbx4rDTArmOumZ9SmWHkBavU8PpU=
Subject key identifier: 5B:08:56:4C:C3:D0:D5:09:38:74:AA:D2:F0:44:26:DA:D4:DF:E1:FD
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 0198D583D5EE3FEF9A80613499FAE641707B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: ve2TAbOmU05i1R045uscHz1IAaU9QnPlZ49XnJi36EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d5:ee:3f:ef:9a:80:61:34:99:fa:e6:41:70:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=5b08564cc3d0d5093874aad2f04426dad4dfe1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:fb:5f:35:08:70:29:e2:3e:eb:f1:3d:ba:
b1:ca:71:6f:72:0c:d2:b4:39:1f:3f:b3:80:7b:4e:
e8:95:90:ba:8a:94:31:b0:e7:a0:90:27:0c:27:eb:
d2:f8:f1:36:da:f8:5b:78:19:96:e9:c3:89:98:93:
de:b2:75:5a:77:c8:24:2c:fb:dc:9d:28:dd:c6:b4:
45:69:9f:c3:15:39:af:73:ff:60:77:75:c1:81:1e:
5a:9d:d0:ea:ff:86:53:0f:47:89:57:c2:cf:e3:5c:
de:84:a4:1a:8a:bb:0b:ec:ff:7a:83:f2:d4:92:32:
8f:5b:57:c4:65:92:7c:c9:30:25:86:c1:96:d0:86:
b8:e6:16:29:0a:d7:7a:42:3e:e9:d9:e6:eb:d6:47:
18:62:b2:cc:a9:80:18:46:25:91:e7:bf:c4:77:50:
c9:98:72:37:c1:3a:3a:4b:bc:87:2f:ab:e2:87:17:
fb:22:f2:e5:c7:3f:51:1d:d9:58:21:ed:43:c4:e9:
a6:03:79:a7:d8:6f:d8:0c:44:5f:b2:ba:33:d5:cb:
34:cb:c2:a6:3c:2c:a9:c6:8b:b8:1d:a2:38:97:86:
fc:03:10:d8:d6:21:84:73:72:ca:75:22:31:a2:73:
00:af:c8:52:22:84:22:74:ac:a5:20:ec:56:61:5f:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:56:4C:C3:D0:D5:09:38:74:AA:D2:F0:44:26:DA:D4:DF:E1:FD
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cb:c8:5e:23:2c:f8:a5:fd:49:c3:f5:f0:62:7c:ea:47:76:
af:5c:aa:ac:18:d0:6b:a4:7b:9f:e1:e7:a6:7f:91:41:03:f2:
49:6b:9c:15:f8:17:1f:d6:7b:b6:94:f6:bf:c4:fd:ac:7f:70:
f0:cd:16:5e:ee:e2:43:ef:6d:65:c9:e4:ea:4c:9f:0b:1c:7e:
ec:20:a2:0b:76:3c:02:5e:f0:13:6d:2e:b1:d8:39:1a:40:e3:
05:f2:05:d8:88:a5:80:d1:eb:4e:a3:13:76:53:12:0f:3a:4e:
e3:76:d8:42:4e:4c:0b:e0:7b:35:f2:31:96:c4:9d:09:30:94:
c9:97:65:0b:8e:4f:55:25:b7:c2:2e:5d:19:1d:ae:20:9f:22:
00:aa:3b:f5:94:01:18:17:e5:60:2b:60:60:1e:d9:d9:d4:c1:
18:e6:d3:40:ce:79:a4:e1:b5:3b:b3:27:e9:cb:54:6a:2a:25:
37:79:58:a7:b3:af:76:97:80:7b:93:3b:04:38:b8:b8:06:7a:
4f:86:09:9e:59:d4:cb:83:08:a7:51:08:02:83:1c:96:a4:b4:
c9:70:ea:a9:9b:48:6e:fa:a5:fa:43:f4:56:79:c1:ec:24:ce:
33:1a:bc:0d:e3:f6:86:a9:07:23:83:b6:d4:fa:fd:89:62:43:
c7:d6:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:43 2025 by rpki-client