Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: ho1+brv55UqZ24HEotQDH2b6s8v7SAzAGfgQiapNk14=
Subject key identifier: 6F:CF:D5:99:82:1E:4D:AA:17:62:88:EB:68:CC:13:D1:C8:9E:2B:D7
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 0197B6A082C78CA8245FB87357DA0107982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: 5fRIi7PIe7wuoHYG165EuhfgVtiZMNCeb7tJS8dr9qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:82:c7:8c:a8:24:5f:b8:73:57:da:01:07:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=6fcfd599821e4daa176288eb68cc13d1c89e2bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:84:eb:31:88:63:6d:36:2d:4e:91:ad:6b:
d3:09:a6:1a:f2:64:0a:a5:77:22:a1:c8:13:0f:cd:
35:10:52:f9:56:a0:3d:cd:6f:56:ac:c3:03:b4:89:
b5:d3:dd:6c:f9:93:42:79:72:40:58:e9:26:7e:18:
1f:9f:52:2c:b4:99:6f:1f:42:ac:b0:ea:97:53:da:
f8:b2:48:0b:56:cc:e1:9a:04:f2:6a:f3:26:11:59:
fc:27:1a:24:51:e3:1e:52:cb:bc:88:7e:2d:6c:fb:
fa:ba:a9:d7:a3:da:b8:a2:b6:0f:1d:38:a3:c4:bd:
5c:19:7c:1f:f1:3e:cf:13:20:48:b7:7a:ea:1e:33:
a9:5c:f5:be:68:03:73:4e:c2:ee:37:f9:36:8c:e5:
f5:bb:75:42:e6:c0:59:3c:60:e4:69:b4:cf:23:3b:
b0:97:ea:1d:e4:58:4c:4d:4f:e2:5f:be:8b:29:52:
7f:62:cd:37:5b:c9:98:89:b6:95:4a:0d:eb:bb:55:
bf:e4:25:8c:81:65:45:84:d6:c1:59:ce:14:d0:51:
c8:46:4e:c8:2e:a1:60:65:56:f1:dc:76:68:ba:f3:
6b:61:6a:07:4c:9c:36:ac:60:30:fc:6b:11:d9:42:
e0:39:d6:85:76:36:dd:3c:47:75:31:70:7e:d1:da:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:D5:99:82:1E:4D:AA:17:62:88:EB:68:CC:13:D1:C8:9E:2B:D7
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:58:98:dd:82:e9:f2:cf:53:93:33:f9:44:f4:ec:b9:56:
90:59:c1:0d:b6:e8:b4:d2:a3:a9:60:22:67:05:c2:48:80:77:
cf:aa:7f:2c:f7:3a:ad:20:d4:8e:f2:2a:e5:fd:0d:10:ef:ff:
9d:eb:cb:c0:ee:df:7f:99:5a:a9:b7:58:75:4b:60:b3:c1:fc:
18:3a:cc:ae:95:83:63:f6:40:27:49:bb:52:0b:fa:b4:87:83:
e3:8d:bb:60:ad:85:ac:36:5d:25:3e:12:72:03:03:7d:7f:25:
e8:1c:da:07:ef:cd:c5:71:4f:7a:83:88:97:cc:d3:ab:43:02:
3d:0c:49:a0:80:eb:e1:c2:2f:4d:26:8e:1d:a2:8f:9a:46:c2:
7b:e0:8e:31:59:fb:e7:3a:31:3b:ca:8f:c9:25:18:03:1d:3d:
6e:d9:e1:50:64:aa:5a:08:f5:1a:39:07:cc:95:87:f1:e1:c4:
33:b6:23:cc:c9:d9:20:00:d4:05:bb:8c:1e:39:64:35:e3:a8:
91:81:a8:6e:68:b9:a3:65:65:b9:bb:22:be:0e:a2:d7:cf:7c:
d9:a3:2b:0c:a0:3d:fb:db:3e:68:12:e0:dc:d4:81:1f:20:ae:
a9:09:73:eb:a5:7f:7d:27:03:ea:7b:4a:2d:f6:ef:d5:0f:a7:
2e:93:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:32 2025 by rpki-client