Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: Nzn0Dpyz7TSW30/tEuqOS/1kTydTIJXD5DuBOYLZ2ng=
Subject key identifier: B1:22:73:72:2C:A9:FE:30:B0:2B:01:6F:BD:0E:4E:1B:FF:46:78:A2
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 0198D65F682A2BED3F4635E14590FCACA01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: pflk3QN8x52aoPCLfeGy9VT/h9mfdCDYhrAC9FCVXbU=)
2: MmjfxuCzy8RCD_bS0dXma_I3fbg.roa (hash: C27+2sBRov0IsR0wlMJBAiFwS3ECbaTJJ5d3/PH1Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:68:2a:2b:ed:3f:46:35:e1:45:90:fc:ac:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=b12273722ca9fe30b02b016fbd0e4e1bff4678a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:7e:bf:a2:97:67:77:80:92:a9:8a:1f:a2:
c0:8c:3e:d8:02:f6:c8:e0:9f:b1:a2:fc:dd:af:d9:
7d:f5:87:0e:82:84:d7:4b:04:a8:ae:81:6a:55:1c:
f5:eb:5a:60:bd:ac:54:dd:6a:c7:af:ab:18:61:2b:
98:29:86:6a:e1:72:de:88:60:ca:08:d7:7e:08:3d:
a3:61:6c:29:91:c0:f8:f2:45:81:79:30:a4:fc:c2:
73:e1:fe:4f:35:8c:e9:31:e0:56:e2:fa:7f:7e:85:
60:d9:e3:f5:3b:34:16:12:fa:25:83:18:85:0a:e7:
b2:c2:b2:c8:09:6a:5d:b9:0c:1a:09:04:f6:54:7a:
0c:24:fa:45:5b:e5:2f:2d:1c:4a:5a:ec:56:c3:e5:
51:ef:1a:f7:28:10:d4:ad:db:5b:25:d8:2f:d6:77:
c1:7f:28:b3:e5:21:7e:a8:00:30:9b:d9:d6:67:cb:
c1:92:f7:46:af:14:8a:9b:11:e5:15:46:b2:41:a1:
af:4b:a0:fb:c6:c7:d0:7f:36:e9:ac:06:a5:d4:6a:
3a:cc:f2:4a:b9:56:2c:46:3d:f7:d0:fa:d6:56:a3:
9f:05:3f:c0:98:c5:6a:a0:b0:08:5a:69:e0:1c:4d:
8b:9f:8e:39:3c:ce:e1:44:e7:c9:9b:8c:a4:6c:f1:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:73:72:2C:A9:FE:30:B0:2B:01:6F:BD:0E:4E:1B:FF:46:78:A2
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:64:0d:af:9f:6b:1c:3b:6f:07:4e:15:4f:5f:9f:ce:12:70:
7d:da:b6:35:90:56:3e:1c:d7:16:c3:56:62:55:f9:d0:1c:cb:
30:71:27:cb:1d:e7:6b:65:e0:40:74:f2:95:4b:4d:d0:a6:d4:
3d:4b:da:e6:3b:27:9c:8c:29:1b:c9:63:4b:32:52:d1:b4:10:
22:7b:53:fd:4b:ae:f1:d5:ec:27:05:d1:16:01:6e:9e:e2:31:
b2:f0:3b:bf:81:5b:62:0e:f4:d1:d0:05:51:5f:00:de:d5:28:
1b:5e:ad:d0:f4:12:cd:d3:37:c9:df:68:d4:d6:d5:fb:78:d7:
e1:3d:00:7e:12:c3:3d:30:fe:08:29:2b:af:7e:c9:84:57:06:
3b:6e:c4:31:c4:d5:04:49:b5:c2:b9:94:68:00:9c:ef:dd:24:
6f:fe:3a:42:ce:19:74:a4:d2:d0:b9:7f:30:a3:29:6a:d9:83:
ff:41:2d:67:40:05:3c:7e:6b:79:c9:10:5b:cd:bd:ef:a3:2b:
40:08:ae:eb:2e:82:02:77:30:92:e5:04:db:9c:46:0f:35:d2:
bf:5c:e9:14:7b:c7:96:01:91:d1:55:0c:18:e7:52:08:54:f2:
7a:8e:84:1d:3a:52:43:99:58:d2:8f:16:8c:d1:c2:cb:0b:97:
6a:09:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:16 2025 by rpki-client