Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: QAz8JE+fUdAgAPC9+DHAJSHw6sYLae0tVtAg0rbRWkk=
Subject key identifier: 0A:A8:A1:EB:75:72:1C:19:D6:37:06:50:90:8C:B6:45:81:53:FC:03
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 0198D4DFEB3269ED1E9AF4594AFDA97E82D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: //g6B4At3IDMjYJWHtggmjt1Zlac0a2MFj6h0Y7o7js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:eb:32:69:ed:1e:9a:f4:59:4a:fd:a9:7e:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=0aa8a1eb75721c19d6370650908cb6458153fc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:e8:b8:e9:a8:9e:c7:ca:55:df:cd:6b:02:
fb:64:57:5f:0c:bc:6d:cb:b9:84:9a:f6:99:dd:2a:
f8:08:6a:7f:27:61:1c:1f:7d:b6:2d:d1:9d:65:c8:
45:39:c1:61:1f:83:78:b5:52:3a:b3:19:0e:3a:65:
ec:a6:ed:e6:44:37:b1:8d:3d:ee:4c:82:30:d4:e8:
4a:be:eb:df:bf:8b:fe:cc:18:2a:ac:7f:e5:e7:88:
78:74:42:e6:56:bd:25:2c:24:80:e0:f2:89:34:83:
47:ed:48:36:36:38:3a:e6:77:98:98:10:82:9f:48:
55:1f:6b:1f:78:9c:ac:49:9c:3e:65:6e:3d:1a:94:
08:3c:26:bf:5b:63:a6:41:53:da:20:86:4f:95:7d:
57:2e:6f:4f:c9:1d:e0:1f:89:43:85:0a:f0:62:ff:
00:a2:51:34:d9:7f:c3:89:20:4b:5a:12:5d:ea:15:
03:18:53:89:e3:92:8b:ac:12:4d:d2:f0:3a:af:9d:
cc:01:c6:18:17:cf:b3:d3:ea:35:c0:f2:5c:da:a2:
21:5a:c5:15:37:7f:3c:58:55:9b:98:d0:4a:87:2f:
83:75:a7:98:92:c7:f3:f7:e0:8a:33:e7:1e:1c:3b:
a6:18:e7:76:54:fd:d5:3f:9a:c5:88:41:ce:a8:b9:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:A1:EB:75:72:1C:19:D6:37:06:50:90:8C:B6:45:81:53:FC:03
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d2:8c:6f:4e:e7:9a:12:3a:32:00:88:c6:c5:df:c3:24:0e:
a4:37:a9:47:4f:04:93:ad:1f:6b:1b:8b:62:33:ab:3b:5a:71:
08:e9:e2:d2:a5:04:b5:0e:b1:ab:96:8a:d8:b7:a0:be:fd:07:
e8:74:7b:16:0c:04:fe:0c:61:a6:46:b0:ef:18:0c:e6:e2:4f:
90:9e:cc:17:dc:03:76:eb:c6:b6:b3:5f:7c:17:ea:d6:2e:f9:
d0:5d:1b:4b:d8:a6:e0:c5:5f:6a:44:19:e3:19:e8:91:9f:2b:
e0:53:77:5c:3e:dc:43:b3:8a:c0:62:db:8a:78:5e:ee:11:75:
c9:d9:2f:61:bd:64:b3:41:21:c7:21:0d:45:47:28:5e:ad:31:
b2:2a:04:a3:41:bb:61:6a:a8:c4:b1:9e:d2:0c:37:61:6c:89:
52:1e:ca:9d:0f:3f:4d:90:ef:18:8c:89:5e:17:99:cd:5b:bc:
d7:cd:7a:28:21:19:76:52:7d:4d:e5:98:b3:b9:a4:20:49:e1:
94:9e:86:a0:eb:50:d9:8f:ac:ec:d5:a7:98:32:dc:ab:17:ca:
7d:f7:ae:eb:f8:18:4e:63:91:c5:d5:89:5d:2d:0c:96:7e:cb:
8f:73:b9:e8:19:6a:eb:ea:29:28:f7:52:b7:a1:2b:fd:c8:af:
47:bb:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:37 2025 by rpki-client