Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: jZDz8M/969if1H3EWkjR8vTFDEmJ+uftbR+8UAt35WU=
Subject key identifier: CD:44:72:C1:CD:DA:FF:21:89:FD:D1:5A:32:88:8E:35:B8:1E:37:D4
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0198D583B29C16B399E0C990613FA8C15453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 04F2
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: EtzaZILSa/jNtRzOB+BqSn68cF1+6O3D7qrHrimFzZA=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b2:9c:16:b3:99:e0:c9:90:61:3f:a8:c1:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=cd4472c1cddaff2189fdd15a32888e35b81e37d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:b2:52:72:50:f2:55:80:e9:d1:49:b7:e0:
00:3b:f5:dc:f7:8c:91:f3:0f:4f:94:6d:b2:9d:30:
5e:43:ae:28:a1:63:c0:17:06:9f:51:3e:81:a7:0f:
f9:e0:5d:ed:2e:d0:21:23:7a:f0:91:fe:81:d8:66:
73:b4:03:c0:e1:77:de:50:ae:93:36:6d:f5:cc:7e:
c5:99:38:78:9c:36:49:e9:8b:37:78:e1:c3:4f:80:
20:b8:3d:18:92:ee:3f:07:47:43:0b:95:85:95:88:
ff:bd:23:77:a4:45:94:82:0c:81:4f:75:55:a0:85:
9e:24:39:4b:b5:73:39:21:1e:a8:0d:79:08:af:85:
85:63:7c:12:75:71:7b:3d:82:5f:fb:ef:92:45:29:
cc:4c:6c:a3:0b:1f:1f:73:52:ce:93:d1:23:e6:51:
48:bb:27:fd:ae:c6:15:ab:90:16:a9:22:20:41:30:
09:6f:d1:0b:3f:4e:52:ee:e2:8b:3c:3c:fd:59:52:
59:9e:58:f0:d8:cf:23:7c:d6:be:de:f2:4f:ea:1e:
a7:12:67:56:90:92:ea:91:f8:66:9d:1d:37:f5:70:
1c:d7:7e:0a:ec:30:ed:0a:49:ff:9a:ba:f2:8e:8d:
1f:a5:4d:e1:9b:8c:38:2a:4c:49:8d:af:e9:57:c4:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:72:C1:CD:DA:FF:21:89:FD:D1:5A:32:88:8E:35:B8:1E:37:D4
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2a:c2:65:8f:71:0c:b1:08:38:07:d2:cd:83:66:b9:ec:6a:
0c:6c:e5:36:c6:86:3b:d8:9e:9f:29:d7:0b:d4:ec:78:50:13:
e9:8f:8c:b2:97:c2:28:48:f3:91:7f:3a:fa:ab:a0:a9:ab:78:
1a:f8:20:46:87:07:dd:4d:38:93:c7:ba:f7:55:12:e2:f4:a4:
1c:47:53:27:ad:97:b6:3c:a6:c3:df:32:90:6f:bd:a6:d1:fc:
a4:a1:4e:4d:f4:77:f6:92:1c:7e:30:54:17:e5:4a:7c:fe:c4:
19:d8:4e:0c:d0:1b:0d:54:b1:96:12:03:63:86:93:6b:a9:8a:
27:c9:39:e5:72:75:8e:c6:00:a7:53:44:93:9c:45:7d:c1:1f:
78:37:0c:1c:47:b0:2d:46:84:13:02:6e:3c:e9:83:ae:a7:91:
07:bf:be:96:42:a7:db:d8:0b:cd:2d:83:9f:61:56:d7:56:be:
d0:31:f7:53:8d:a3:a2:42:c7:16:42:23:ba:ad:e4:73:6c:f9:
f7:9f:fc:fe:d5:e1:20:25:55:47:30:3b:b2:2e:2a:7b:7a:2f:
11:0d:a1:2c:fc:5c:ff:ec:cb:bb:6f:fe:1d:98:38:66:1e:6e:
69:f6:ba:3a:e8:5b:26:87:44:42:7f:61:c6:43:07:39:98:56:
40:a6:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:38 2025 by rpki-client