Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: fr4Gz2dn1xSNuAr5qqSUgNopq69UfBY/k8yJTNppC6I=
Subject key identifier: 1B:74:C4:76:17:B0:FE:31:92:7B:8E:3F:15:9D:DF:8E:E3:8D:A6:6E
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 0198D7061AABF6CC79FF339630DD9F595D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 1194
Signing time: Sat 23 Aug 2025 13:02:38 +0000
Manifest this update: Sat 23 Aug 2025 13:02:38 +0000
Manifest next update: Sun 24 Aug 2025 13:02:38 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: qhppKPO964ygCB03x20Z8gla91eR0R7AW/jjZ8eXmDk=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1a:ab:f6:cc:79:ff:33:96:30:dd:9f:59:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Aug 23 13:02:38 2025 GMT
Not After : Aug 24 13:02:38 2025 GMT
Subject: CN=1b74c47617b0fe31927b8e3f159ddf8ee38da66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:04:8b:9c:28:77:cf:68:4a:e1:cd:95:c2:
8b:57:36:cc:66:8a:57:92:ac:44:0f:bd:29:99:18:
48:33:8d:10:75:d3:f1:cc:58:50:49:7d:4e:99:fc:
01:18:3a:f4:36:5d:c5:8f:e8:34:49:a6:6d:71:52:
0b:a1:7e:42:c4:b1:35:d4:06:7c:76:70:04:8e:43:
6f:63:6a:43:68:54:e4:b3:ab:9c:0d:65:03:36:d1:
ee:5a:8d:31:d8:68:13:ce:9b:18:e4:40:ab:bf:c3:
e9:b6:2f:42:6a:5a:aa:a5:ff:47:b0:ac:a5:7c:d5:
b7:85:05:4c:60:69:95:ba:d2:3a:7b:77:e7:61:33:
ae:0f:32:df:79:bd:62:27:8d:28:32:0f:82:10:fd:
48:6c:96:e9:4f:73:d3:f3:fd:a8:82:9f:11:20:40:
0f:dc:90:36:f5:4a:34:d9:16:05:1f:e8:fd:ba:34:
21:3c:fe:33:7f:4b:d7:6d:b1:a2:e1:0c:05:40:2b:
f9:90:a8:26:1f:87:42:7f:d3:2e:20:06:ef:65:91:
98:02:da:ef:9b:a3:e6:58:35:14:09:f3:98:2b:8f:
77:68:1a:a5:b1:29:67:8e:4c:f4:44:be:0b:4d:73:
a2:f6:b0:4c:d4:7c:44:c1:fc:81:6c:e1:2b:40:a4:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:C4:76:17:B0:FE:31:92:7B:8E:3F:15:9D:DF:8E:E3:8D:A6:6E
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:be:5f:9a:e6:e6:4d:23:65:a5:28:4d:74:b0:03:83:30:
22:e2:57:ea:de:a5:74:1e:23:04:8c:91:3d:40:b2:f1:93:45:
30:73:fc:19:75:d7:7f:e7:5e:d6:fd:bb:37:60:5f:7e:55:41:
73:5d:8d:a2:db:e8:3e:97:b2:ab:42:61:58:1a:7e:9b:e6:d5:
c1:8b:25:c1:55:ae:a4:4f:df:6e:2d:14:10:b9:b4:cc:6e:a8:
39:73:20:97:1a:f5:02:ec:aa:87:50:9d:98:9c:69:30:a3:4e:
ed:7f:e4:b3:47:18:86:a5:9f:3e:70:77:72:8f:25:fa:6b:2b:
b1:a3:d0:7f:62:eb:aa:0a:02:01:62:77:67:ec:c7:43:d9:c5:
9f:cc:4f:e5:a9:98:ce:c8:f7:46:48:32:3f:17:b7:0f:a8:3c:
ef:7b:54:58:01:07:54:a2:0c:2b:ed:77:95:5d:d6:3a:e0:c7:
c8:8c:34:c4:84:49:05:b5:7a:b9:75:5c:27:80:e4:bc:79:53:
25:72:10:f4:71:09:e9:f5:36:6c:7b:6f:6f:cd:c4:cf:12:b6:
d1:c3:3c:9b:18:d3:c5:37:ad:e7:33:b5:22:63:75:2d:de:40:
d2:65:17:99:f7:26:32:18:84:08:b1:9d:d9:c7:18:7a:e1:e5:
67:9b:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:26 2025 by rpki-client