Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: H2tvVuZQ14zJkLitDT8QVs7gypYeZiI9GeB9ThAd6p8=
Subject key identifier: CF:EE:6F:EA:EB:E3:DE:83:F2:CA:E2:44:3C:A3:76:F7:D3:EE:F9:64
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 0197CB3A3E08997200249997BEFC9CCFB0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 1252
Signing time: Wed 02 Jul 2025 13:01:21 +0000
Manifest this update: Wed 02 Jul 2025 13:01:21 +0000
Manifest next update: Thu 03 Jul 2025 13:01:21 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: H9NVr/yfHjRir0Oc1SReW7lRPRGSzO/GE7qSfRM1R58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:3e:08:99:72:00:24:99:97:be:fc:9c:cf:b0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Jul 2 13:01:21 2025 GMT
Not After : Jul 3 13:01:21 2025 GMT
Subject: CN=cfee6feaebe3de83f2cae2443ca376f7d3eef964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:ae:af:5e:ae:34:1a:21:fb:d4:59:37:03:
3f:35:4d:28:ea:90:c0:5b:9f:61:d1:cc:a4:01:3b:
a5:bb:8c:30:ed:e0:b4:97:f4:08:a2:1f:1a:5c:2f:
3a:06:66:57:29:c5:6e:44:6d:3c:b6:a2:17:32:08:
65:7e:49:d3:19:a4:ff:76:f7:b7:cf:fd:86:d3:35:
a2:ad:f6:48:fc:93:2a:df:95:2b:1c:7f:4f:07:f7:
92:da:47:db:df:fb:55:06:e2:37:35:61:0d:d2:b1:
22:96:6a:02:98:15:e1:07:4e:3a:3b:d2:36:e1:7e:
40:47:8e:1e:a2:08:39:61:1f:06:91:0d:86:db:67:
16:93:a7:6e:2f:8c:dc:ea:4b:6d:48:b9:6e:70:67:
40:2a:43:11:b8:78:ae:89:ab:c4:4b:23:1e:ce:d7:
e5:d6:bc:e6:43:16:e0:3b:e0:84:35:88:2e:53:cb:
04:f2:a5:34:b6:c1:08:c7:ad:53:e1:05:f0:8a:5e:
a8:fd:68:c8:35:c0:e2:6a:9e:4e:5e:00:f3:3d:c4:
0c:5e:c8:a3:a0:02:c8:93:5d:7d:3f:f9:40:b3:75:
6e:f9:be:6e:50:a9:89:d6:99:c7:6b:b9:cf:ec:f1:
08:88:a9:fd:96:45:5a:62:88:60:44:83:40:b9:e1:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:6F:EA:EB:E3:DE:83:F2:CA:E2:44:3C:A3:76:F7:D3:EE:F9:64
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:93:d6:8d:49:b0:c6:59:22:8d:6b:7f:da:04:b0:d6:ab:
ae:a8:dd:60:23:51:0e:8d:d9:4b:1b:9e:5d:da:6f:89:d9:b1:
35:a4:6c:f2:c3:94:a7:8f:00:b9:9c:24:05:46:66:d9:38:21:
ce:45:c9:b0:31:9c:f0:d8:78:1f:6f:0a:31:a5:00:f2:7a:e4:
9d:87:b5:df:4c:9a:a9:05:3b:04:ea:43:84:1f:83:a0:2b:ea:
7a:6a:a3:45:7a:c7:0c:15:74:4d:0d:82:11:27:9d:8e:b6:8c:
04:56:88:01:28:89:76:d7:59:60:90:38:21:6a:75:6e:1a:5d:
47:b8:2a:55:56:c3:6b:3c:5b:83:e4:84:b6:6e:1a:a1:73:74:
81:81:2d:6c:83:06:4c:25:4b:fe:0f:6e:a1:df:57:66:04:4d:
b8:9b:d2:4a:94:4e:69:11:6c:ef:2e:64:f5:65:de:38:07:95:
b2:99:f6:9c:10:cb:71:39:ef:e1:f8:94:18:75:0e:17:f4:1c:
48:9f:7f:f6:23:eb:3f:49:bc:65:87:1a:8b:6a:a8:5b:7e:d8:
8c:63:9a:11:06:ba:5a:39:0b:91:46:bf:2d:14:6b:3b:58:cf:
fe:61:d7:38:38:96:47:45:74:99:ea:c3:92:37:6e:68:12:79:
ba:d9:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:26:34 2025 by rpki-client