Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: PSG8d9jY4yz6FmpL6/ohWknq76GLpIE2/YteMHCujeE=
Subject key identifier: 2A:2C:A1:59:02:26:50:9F:96:BC:65:A5:C5:F9:ED:94:AA:5A:61:E8
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 0198D473C58D8937A1A2F9CBFEF7547E4D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: UJGIi722dP92Aaf0T15xjPvrd3xUT+3GWRnCqlRqeuc=)
4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c5:8d:89:37:a1:a2:f9:cb:fe:f7:54:7e:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=2a2ca1590226509f96bc65a5c5f9ed94aa5a61e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:1c:30:a6:08:6a:f4:26:88:98:b8:92:18:
73:f2:3d:6f:2d:a7:73:02:7a:be:87:39:3c:72:74:
6a:f4:5a:2a:b8:50:ef:25:01:2f:dd:92:e0:3a:64:
a9:a0:74:39:bb:96:ac:f4:4f:a3:1a:7c:00:c7:55:
ce:c4:bb:6f:75:86:8b:34:1e:9c:0b:28:a4:22:45:
cc:93:e0:33:8f:1e:93:d8:06:a5:d3:00:b3:27:41:
56:c0:96:70:27:0b:03:cd:f1:9d:03:e2:4c:97:e9:
4d:44:7d:82:48:8e:55:0e:1b:d2:6b:c1:eb:98:73:
93:23:6a:d8:10:06:2e:cd:bc:ed:08:e6:19:b9:7e:
52:84:8c:36:15:84:76:54:8f:06:5e:ce:7a:1f:18:
d5:e6:ab:58:a6:39:69:b9:cd:09:e2:42:20:58:94:
fc:0e:af:b2:c1:4a:be:b8:32:39:ca:1d:7b:57:4c:
49:39:7c:3f:a4:a5:a6:dd:f5:8d:7d:c9:9c:aa:69:
88:4d:fc:1b:cf:3a:c0:33:c9:53:d4:13:07:78:75:
13:f3:dd:fd:0a:fa:a1:20:a7:9d:1d:93:da:9d:86:
8c:fd:b3:61:80:5b:91:86:38:6b:f4:94:c9:c6:ff:
62:73:ba:40:e0:ef:23:00:27:34:e8:33:b7:6c:89:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:A1:59:02:26:50:9F:96:BC:65:A5:C5:F9:ED:94:AA:5A:61:E8
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:b6:73:3f:7d:eb:f6:51:6d:3a:5b:ba:fc:bf:d7:d9:93:
d4:e8:b1:65:dd:ab:e4:2c:7d:b9:14:dc:e8:cd:70:78:a8:54:
44:94:07:9f:40:ab:65:35:f3:18:96:8e:45:da:2e:52:4c:31:
06:68:bd:5d:f7:c3:78:23:ee:37:1c:f1:f7:cc:31:03:0f:9e:
20:58:55:68:b1:4e:c8:25:c2:9f:fe:2f:6f:60:ef:77:4a:3c:
75:e7:ee:5e:e3:5f:52:7f:c9:6a:b8:0a:bc:43:63:a1:3c:c8:
5c:a4:94:53:1f:af:ca:b1:b7:6f:f2:2b:7a:ef:0a:82:73:ff:
51:68:10:9f:69:86:81:1a:99:40:dd:c4:50:18:c5:b1:af:88:
85:82:30:c9:e0:72:0b:eb:6b:5d:e3:cd:e9:4c:1e:d0:e3:eb:
cb:43:b5:ab:3a:ef:20:3c:b6:4a:92:a2:1e:96:ac:05:04:95:
a1:c1:92:89:75:1c:35:ca:e8:25:15:15:45:fd:e9:4f:b7:f5:
02:7b:4a:d8:30:15:d7:c8:b8:7b:6a:54:25:5b:75:1b:95:ff:
70:1e:ca:06:95:a0:e5:05:24:69:b7:2c:f5:b4:73:58:a8:c8:
ba:46:54:40:68:16:46:4d:65:10:09:f7:b9:06:8b:96:96:48:
92:0c:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:15 2025 by rpki-client