Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File: JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier: M2n7A6CkSrvW69MCqR/fwjYxSGchUO7FJdH8zMX1wzs=
Subject key identifier: CB:32:F7:72:D2:B3:75:9D:18:C5:AB:37:20:E5:A9:6C:5E:52:50:06
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 0198D62987CFE129EB43AE93F0CB869EB31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: LroKR6Ys1mL1Q3oUolqKIINXRCQYavCFYMQb2iorBcs=)
2: T1lDS3VAgHH_OYxBqNAmtT1FyIY.roa (hash: UmymOGtQtN7xS1moQNoUAKTjXkigVXv6mJ510I8rfCA=)
3: bB6JOun3nxQB8f28blagNTVyzZo.roa (hash: TbHZ/OFAxsSEb5/YS6vtIBW7Rfm/XIYEbAx0xL23EHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:87:cf:e1:29:eb:43:ae:93:f0:cb:86:9e:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=cb32f772d2b3759d18c5ab3720e5a96c5e525006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:e1:81:e5:48:a2:f4:ce:e6:73:ca:06:e3:
d3:c4:fd:f9:05:65:41:e4:24:51:50:ec:a5:97:e2:
6e:aa:a1:7d:3d:04:8f:e3:5e:56:fa:53:1b:74:f4:
f5:39:44:4c:50:19:e9:10:cb:60:43:37:e3:48:ac:
c1:33:5c:20:32:d7:c6:80:f5:67:4a:57:bf:16:75:
22:c9:f6:89:12:82:23:b3:63:95:3a:95:98:6c:52:
3c:29:64:68:d6:83:40:9a:ea:05:db:0e:3c:7c:5d:
67:b7:e3:a3:12:6c:11:bf:72:d1:f2:ea:6e:26:07:
94:d3:9d:cc:28:85:f8:2b:83:1f:d5:32:93:ea:82:
2d:90:d4:92:40:00:a9:e5:83:0b:50:ee:a2:8f:6f:
b5:33:a4:19:66:6d:8c:bb:20:24:84:ad:a7:68:41:
94:42:21:8e:15:cb:94:62:3d:a9:af:26:4b:01:41:
20:c7:69:43:63:05:52:f1:ab:b5:de:1e:d6:1a:60:
1d:cc:16:63:4d:bb:0a:31:bd:1c:ae:60:b7:a5:a2:
2d:fd:59:c4:3d:ce:6c:5a:a5:e7:de:4b:b6:47:02:
11:be:3f:64:d2:e8:5f:0c:39:01:ff:bd:8f:80:80:
da:1f:53:8d:31:4a:6d:98:60:c3:be:89:74:93:8f:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:F7:72:D2:B3:75:9D:18:C5:AB:37:20:E5:A9:6C:5E:52:50:06
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:c8:05:27:58:74:a4:2d:35:6c:66:66:3a:14:0d:2e:69:
db:b2:a5:e7:54:9e:5d:98:e0:b2:c3:33:f8:c1:f8:f8:a7:ee:
a9:52:dc:72:eb:1e:64:a7:a6:e9:33:f5:9a:2e:b4:03:f7:35:
5b:6e:36:31:49:ec:96:0d:ed:aa:53:26:a4:57:02:93:0f:e9:
83:92:41:0f:ea:a9:17:b4:49:10:08:35:c2:f9:9c:cc:53:c6:
53:d9:34:fa:22:2c:c7:42:f9:d8:57:42:80:1b:1b:18:10:93:
9c:ed:f9:73:15:66:40:44:f9:22:89:68:a8:eb:2a:4d:d8:8b:
05:54:61:7d:09:31:87:cb:5f:2a:9c:8c:0d:14:60:f0:63:f1:
49:65:44:86:13:cc:74:14:0a:a6:53:49:6d:86:3a:d5:9d:a3:
83:fe:e2:32:b7:da:9c:29:1f:67:9b:e0:18:8e:03:d0:a8:70:
aa:e9:4e:af:2e:a6:f0:e7:d6:ba:16:24:b5:d5:36:8d:bd:d2:
2a:bb:c6:b6:ea:d9:bf:92:7a:7b:85:2a:3f:20:fe:df:08:19:
49:50:75:0a:02:7b:da:8f:da:14:17:18:54:0f:ae:5e:5d:4f:
9a:bd:2e:d4:79:32:8c:de:05:43:12:1f:0a:f0:ad:af:7c:03:
d2:5f:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:16 2025 by rpki-client