Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: iZj15Otrw5WeXxWHpILBELWuw3jzR9qGwsm7vUpipqk=
Subject key identifier: 90:18:21:97:31:F5:DB:CF:DB:23:62:D1:66:80:B7:4B:69:93:4C:92
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0198D4E0999D907516DC8135BC9866F30C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0722
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: pKLXrlNX+IYeWuFIRR1TAvMhU97jraaBUExMhCfGPtk=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:99:9d:90:75:16:dc:81:35:bc:98:66:f3:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=9018219731f5dbcfdb2362d16680b74b69934c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:8d:35:7e:cf:05:b9:17:1d:44:98:db:20:
8c:1c:c3:0f:61:ba:b8:3a:d2:a5:a2:74:93:49:9a:
61:8f:80:1c:8a:69:78:60:94:ce:6a:78:20:2e:19:
3e:3a:88:1c:ae:ff:23:bc:c5:9f:2d:fd:45:d5:d7:
f4:a5:cc:81:62:29:1b:db:b0:a5:ca:3a:8d:af:85:
83:70:dd:cf:ec:9f:be:84:c2:3b:df:12:af:b4:a8:
02:27:83:29:3d:e4:71:22:2b:72:39:74:e2:af:98:
c9:c5:f7:17:d6:c0:9b:98:89:b7:39:fb:d0:6a:12:
c1:8d:21:e3:3a:52:df:17:81:2e:92:9f:4d:ad:cc:
62:01:85:6b:47:c0:2f:da:84:ff:5b:99:63:e7:90:
96:14:a2:ef:93:c3:98:98:4c:7b:f3:e4:4a:1b:fb:
51:0b:14:dd:41:38:c2:de:7f:88:7c:9c:90:4a:d6:
b9:b1:de:1f:a9:a7:30:64:51:88:28:05:fc:01:c9:
7f:1f:6c:23:9a:16:09:b2:2d:be:f4:35:03:bb:65:
56:ee:7d:6d:d5:c3:aa:a8:3d:03:df:c8:e6:01:f6:
cc:c8:6f:b2:4f:02:fa:63:6f:fa:25:7b:03:89:26:
79:7c:10:e8:cf:bb:be:f1:70:5f:58:61:76:6c:a5:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:21:97:31:F5:DB:CF:DB:23:62:D1:66:80:B7:4B:69:93:4C:92
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:f3:bd:22:fe:8a:d2:1d:20:e4:7d:bd:c8:36:da:91:29:
83:a2:77:c9:2c:44:b2:81:19:c9:e8:11:b8:a9:ff:39:6b:7d:
99:ec:67:87:4c:5b:d1:19:dd:38:a3:6b:7b:e7:3f:77:99:c7:
7a:26:a1:4a:a0:27:4a:a6:9c:10:09:1b:f5:83:92:b8:94:b4:
ba:8e:08:8c:77:23:ac:80:0d:86:be:c6:16:dd:9b:f1:b8:e9:
5d:29:9c:e0:5b:0a:4b:f2:18:e9:dc:3d:3f:ce:f6:bc:91:b0:
ce:c8:68:9b:a3:49:32:b6:f7:50:6a:fc:83:9b:3b:df:0b:74:
39:13:fc:cc:b1:be:1e:b2:54:b3:11:4b:1b:01:65:35:b0:c3:
d8:19:50:8a:80:4a:6b:96:38:d9:af:a5:6a:1c:5c:97:15:71:
9f:f6:9c:9f:a4:8a:b8:b6:a5:4b:cb:8d:80:82:d7:13:50:73:
5d:cf:f2:bd:ae:2e:93:b7:1d:26:30:73:ec:3d:e4:fd:06:e9:
c6:f0:37:72:2a:20:d5:3e:5e:01:3c:11:7e:9f:1f:b3:cb:31:
16:75:54:c2:d6:d1:49:74:ef:6b:b8:af:38:1a:8f:53:39:c8:
0e:71:82:5e:80:4b:54:69:ed:05:23:5f:cf:b2:17:a4:da:e8:
af:7c:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:27 2025 by rpki-client