Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: zyg6T0Q1APblA1mO2YNv4wP91nc7lbID7LqtLNR86SA=
Subject key identifier: C7:65:63:EB:BC:48:0E:A2:FD:5A:47:E3:1A:C0:1A:C1:45:32:6A:9C
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 0198D515FE02B089C14B4CB5633BF4C0AD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 137E
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: 0Ozk8TSYbJ2ZWJegWuAygP_CL9U.roa (hash: gB16aRWagR7Cxhmumf9ReGoxKMb5RK+zp1UcFQRekDw=)
2: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: 50AkBw5yYEM5tZ/gTpzEqg8KBlg7m4cqMSdBiUkwmbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fe:02:b0:89:c1:4b:4c:b5:63:3b:f4:c0:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=c76563ebbc480ea2fd5a47e31ac01ac145326a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:18:bd:84:fb:20:8c:85:03:5d:f3:bb:de:
12:f5:34:f3:96:a5:7e:7f:6c:89:38:38:cf:ef:81:
98:bb:c0:39:47:07:26:c0:f1:28:ef:c2:46:79:46:
54:53:e6:49:76:fa:a5:7c:2a:12:54:d7:59:ca:68:
47:7d:70:92:b1:71:51:9f:a0:22:e9:b9:5d:16:ce:
ee:5b:d3:fe:16:66:1f:0a:9c:88:40:f7:c0:5a:12:
ee:67:e5:1d:f7:de:71:46:b6:fc:cb:7b:b4:20:b1:
57:d6:47:67:95:91:5b:e2:d0:1a:f6:5d:cc:6d:f8:
a6:ae:c5:a8:73:ef:f3:55:ef:72:4f:7d:df:2b:42:
dc:a1:a1:51:d0:37:15:1e:07:3e:4b:21:1a:c4:d8:
90:73:83:b6:7c:53:d2:d9:81:55:ed:46:60:a8:ad:
4d:61:e4:7c:ad:ca:c8:4c:cf:6e:4c:3a:13:b2:82:
25:9c:60:08:1e:05:6a:e4:95:ac:95:14:c3:39:74:
d2:40:f5:20:52:f2:fd:8a:92:f4:80:a2:6c:de:96:
8b:6d:45:35:b4:f5:ef:e9:6b:3d:d8:92:24:47:67:
de:6b:26:8c:c4:d6:a7:34:56:a5:05:e5:55:14:81:
b4:50:17:5e:8c:f5:42:0e:d5:6c:13:6a:cb:03:83:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:63:EB:BC:48:0E:A2:FD:5A:47:E3:1A:C0:1A:C1:45:32:6A:9C
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:73:6f:dd:36:d8:78:ce:47:be:3c:bc:6d:7f:cc:80:99:
a4:d3:50:28:b0:ba:fa:1d:a0:00:1d:a8:fb:92:cc:b6:eb:71:
66:cb:a6:45:44:64:b3:71:65:1d:62:2d:9a:06:f8:70:ab:93:
5f:6a:1e:cc:f3:6b:8f:cb:c2:e1:46:7f:39:1a:d7:8b:3c:cd:
1c:40:e6:0c:39:47:c5:8f:9c:a6:92:55:4e:6d:ae:c4:38:f3:
e2:05:69:45:c0:b4:5c:74:a2:17:49:d3:43:d4:78:b2:cb:d1:
1f:b3:cc:f7:aa:44:63:2a:88:58:b1:90:c9:77:8a:70:5b:a9:
c7:19:74:d8:58:ab:db:7d:93:86:bc:5e:4c:00:08:1e:b8:8c:
c4:10:8e:2f:e4:22:d5:6b:cb:c5:2d:42:8f:79:b1:a7:0a:f5:
a3:f5:af:47:b1:e4:59:a1:37:d5:fd:72:f2:e9:a4:7a:ad:af:
b9:ef:a1:42:fe:30:19:3d:d7:be:d2:fa:c2:b7:2d:00:86:8d:
c7:ef:3c:a0:c2:b4:51:18:fb:bb:8f:08:43:6f:d5:a4:e1:ce:
61:66:8b:30:26:32:6f:64:a4:30:ed:25:0e:98:1e:6b:8b:c3:
52:8f:b0:e8:83:26:a3:3e:db:c9:47:4b:11:e4:c0:e3:77:09:
33:65:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:12 2025 by rpki-client