Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: 0Aq25dcRJicQEt9E8uM6ukfM3EIo0WN1YrTGNP6vMiU=
Subject key identifier: 2A:84:50:0B:0C:D8:EE:D8:38:73:B7:5B:83:8D:3E:E7:7A:E7:D4:6D
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 0197B6A1D180EFE5BC637A356CCD840C0841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: B87eMI2cH5H2Nj27XGefSXWm7E3eoY8pG1d5wJ/5Odo=)
2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d1:80:ef:e5:bc:63:7a:35:6c:cd:84:0c:08:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=2a84500b0cd8eed83873b75b838d3ee77ae7d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:1c:3a:9f:2c:80:08:09:73:b5:ea:75:d4:
66:6d:12:9a:ea:88:cb:bb:09:9e:c5:f1:98:28:96:
4a:1d:47:a1:61:3b:44:cd:c6:ab:3a:be:89:f5:17:
85:cb:60:95:33:61:8f:40:28:a1:81:b2:10:30:d9:
72:00:0f:74:33:06:db:5f:09:0a:9a:71:47:e6:9a:
69:7b:85:bb:e6:b6:f4:26:29:28:2e:cd:36:45:24:
75:b1:6b:db:50:52:45:53:81:e5:65:83:cb:cf:91:
03:10:7d:cc:bb:5c:46:02:d9:3e:cc:66:f2:68:b5:
f5:b6:f4:bc:6c:44:9e:01:a7:d8:98:8a:9a:76:38:
71:91:7c:55:d0:5c:0c:5a:61:44:b8:f2:2d:69:f1:
fc:19:04:d3:fa:93:d8:c6:08:5a:ab:67:4b:63:cc:
97:ba:a2:31:ef:eb:ae:39:e3:59:14:d9:ea:00:71:
d2:50:e0:60:36:3c:78:a3:f4:02:8a:91:5f:8f:e3:
78:e9:db:02:04:ae:0d:0e:9e:4f:0d:e3:dd:a4:81:
4c:53:e2:76:0b:06:14:d2:51:b6:73:8b:f8:63:e4:
0b:8f:5f:bd:40:0c:91:88:d3:0c:b1:1f:8e:0a:84:
cf:96:68:ab:ac:bc:c7:04:19:f4:59:ba:45:60:0c:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:50:0B:0C:D8:EE:D8:38:73:B7:5B:83:8D:3E:E7:7A:E7:D4:6D
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:27:8a:0b:b5:3d:0f:d1:22:d9:1a:cc:85:e7:0c:de:4e:
36:11:57:70:0e:5d:fc:34:4f:a1:36:21:1e:62:bc:2e:9c:1a:
3d:99:be:d2:38:7a:15:b4:ed:4d:f3:cf:2f:e5:94:94:ce:03:
41:06:62:b9:d8:78:a7:3c:0b:89:11:4f:9e:02:4b:a5:cf:5d:
61:59:49:39:db:2d:84:4c:e4:fc:37:ff:33:73:72:e8:d8:41:
01:da:6a:6c:55:c7:8c:ba:72:52:a6:55:9f:0e:ba:47:b5:b4:
aa:87:76:96:d5:77:84:90:16:25:d4:2c:c0:ea:54:54:fa:04:
3d:1c:d3:5e:c8:83:47:0e:20:6f:9f:1e:bd:7d:3d:cc:85:73:
b6:d4:8c:43:4e:7d:c6:af:b8:39:82:0b:b3:6a:05:f4:08:66:
38:d6:a6:91:11:ce:37:28:d1:1a:9a:7f:0a:cf:9d:01:0e:4c:
b6:bd:f1:ed:a4:57:15:49:b2:9e:bd:49:c4:04:68:f9:54:04:
1b:08:18:01:46:cd:1c:8e:5a:e1:d5:18:fd:c0:14:40:fc:54:
16:72:ee:88:5b:ee:92:89:df:a0:c2:38:71:87:de:f5:69:21:
6b:e7:22:87:03:a9:8e:34:f5:24:3a:2c:b8:83:02:63:19:b8:
c6:2e:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:36 2025 by rpki-client