Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: g7vt2GwErtnAZSbKG/QDbkqJwSkjm5KrwadAiGNUqxs=
Subject key identifier: E0:0E:06:9A:22:06:55:ED:1C:4F:49:70:FA:11:8A:A4:0A:49:18:BB
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0198D705AD4B77243850DDAEF836BE38A44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: VMC8+hqcSdufuaLurmPKPXD0vZx+w8xmqIwVPVnZN2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ad:4b:77:24:38:50:dd:ae:f8:36:be:38:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=e00e069a220655ed1c4f4970fa118aa40a4918bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:02:65:b9:f2:99:9a:6f:19:78:e6:a5:c9:
5c:80:55:82:aa:18:b1:f1:17:3f:fa:51:a2:95:f2:
52:f7:ec:a0:45:39:e6:52:9e:53:b9:ef:d6:41:60:
b3:31:ca:fa:7a:ee:af:f7:6c:8f:24:81:bf:10:7b:
de:d0:ad:74:34:bd:e1:cd:18:15:cb:00:9e:b1:5f:
5f:87:18:11:e1:8f:97:14:36:ce:1b:d1:44:3d:3d:
6b:c7:53:09:59:58:9a:84:d7:b1:4b:d5:2f:76:27:
c5:87:25:6a:22:2f:60:76:55:e9:31:6b:b5:b4:ff:
d2:f6:38:35:91:c4:1c:8c:d9:25:a7:98:1f:d7:74:
e6:18:9c:2a:6f:df:91:a5:73:86:49:1e:e0:c2:9a:
5b:25:c7:b3:03:59:38:9c:4d:3b:46:13:e2:ff:3a:
9f:03:c5:bc:76:09:9a:db:88:cc:13:df:50:27:b6:
2f:a9:86:b7:31:c5:f8:03:7f:89:3d:fa:fa:ed:19:
45:55:ea:dd:62:f8:df:26:db:17:ce:a4:08:b7:8a:
9a:8d:58:23:e9:bb:f6:b0:70:2d:3c:14:71:bb:f2:
87:d4:20:da:9e:34:57:3f:c2:a1:6d:c7:65:47:f5:
e2:40:fa:66:3a:48:57:5d:bc:28:7b:25:1f:3d:cb:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:06:9A:22:06:55:ED:1C:4F:49:70:FA:11:8A:A4:0A:49:18:BB
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:a6:e7:48:fb:e4:1c:34:f3:09:e5:b0:60:8f:11:5c:90:
11:20:fa:99:de:76:3d:58:3b:f8:05:45:34:f1:da:46:4e:33:
51:c1:96:38:4c:48:51:5d:30:90:2d:d4:79:8b:2d:2f:f4:dd:
df:18:5d:f1:22:20:75:16:1d:1a:d6:03:86:a0:3b:eb:06:84:
33:57:ab:3b:16:9e:fd:06:98:21:78:70:38:cf:3f:6e:14:a2:
06:2d:68:f0:66:63:55:11:a4:c0:91:b4:d8:87:e0:28:3c:5f:
91:b7:3c:2f:11:99:1f:61:ab:df:18:50:50:df:ac:4c:e2:24:
4c:ab:25:89:5f:65:e5:2f:74:63:d0:c8:9b:6a:5a:f0:16:79:
16:c4:37:a4:2c:95:98:b9:09:88:82:cd:98:37:4b:e9:9b:96:
a9:a9:c8:37:de:cf:20:cb:06:6d:de:f2:c8:fd:94:eb:b7:bc:
5d:d2:f2:35:4d:0b:c5:23:ec:af:c2:19:ed:78:ea:68:8b:f0:
5d:6e:03:91:7d:7d:c9:b2:3e:8d:13:57:25:7b:03:0e:be:07:
62:76:5c:97:0b:d2:99:3b:f4:e5:a3:13:2e:75:97:b3:d8:a2:
6c:4d:7d:f1:a3:7c:c8:7e:7c:5a:e1:c3:19:b3:f8:1f:60:3b:
17:7f:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:23 2025 by rpki-client