Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: c/YD6FgV6sSxx3PFfZP+Pvkhip3C1PP532WIK0FSnPI=
Subject key identifier: 9F:AD:56:3B:36:2B:AC:50:5C:F6:19:1F:DF:1F:C2:1C:1B:12:98:75
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 0197B745232ADDDC1E550042D1BC88DBE7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 0FD2
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: 1TTUC2KrhDO/CHV492/QTwkTTb80YSUuDTYSdvEkK0w=)
2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:23:2a:dd:dc:1e:55:00:42:d1:bc:88:db:e7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=9fad563b362bac505cf6191fdf1fc21c1b129875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:86:e8:c3:d3:c7:36:fc:a7:a1:2f:92:ae:
6c:b2:57:b9:f6:e5:20:6f:c7:3a:f2:21:09:32:a5:
95:50:b8:87:0c:2e:f6:eb:f0:36:81:ac:cc:ab:b6:
97:5f:3d:c5:23:00:6a:de:5e:06:9d:06:b8:54:89:
cd:1a:15:ff:41:d5:22:54:82:54:62:02:8d:fd:63:
a4:03:eb:d9:59:61:bb:3e:b8:3b:09:55:36:4e:ba:
cd:ac:9a:4f:a2:25:f3:97:a5:af:b9:cb:7a:ac:ad:
c9:a6:3c:1d:6a:6b:7d:3e:cc:2c:9c:2a:44:62:a3:
db:f7:c0:4a:e6:ce:af:24:36:52:03:0a:91:ff:33:
45:c9:a2:4d:38:33:73:20:a5:8a:49:bf:1a:7f:1a:
d2:d7:e3:99:a0:7a:35:b8:24:3a:fd:fa:1b:68:55:
55:ab:08:1b:fd:9d:20:e4:20:19:44:c7:4c:66:6d:
bd:c0:7d:b6:b0:e4:64:0a:29:f4:71:dc:51:ad:32:
92:18:f9:43:31:df:25:f5:99:d7:e2:3c:6c:b8:88:
27:f7:77:35:8c:ba:56:97:d9:e3:09:54:29:01:5a:
cf:3a:94:d4:3d:71:9a:8b:93:28:81:24:fb:6c:26:
00:c1:e8:f5:ff:30:75:cd:3e:1e:d1:4a:4e:1b:f4:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:56:3B:36:2B:AC:50:5C:F6:19:1F:DF:1F:C2:1C:1B:12:98:75
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:66:cb:57:64:4d:ac:43:f1:3e:f9:78:78:e0:2e:a5:ce:
b2:8c:f4:8e:c6:af:fe:88:66:9f:b0:d2:79:71:1b:ac:a9:4b:
5c:64:43:b1:04:54:17:75:b1:1b:f4:73:b7:de:b4:d8:25:d8:
6d:e7:2e:de:f5:6a:07:7b:9c:19:a4:bb:7f:1b:69:6a:32:6e:
9d:71:11:c8:ea:1e:38:46:f4:29:7c:af:31:2a:bb:75:ab:7f:
68:c1:67:68:56:8d:ca:4c:1e:24:90:71:e1:eb:52:87:24:98:
07:05:4c:59:94:4f:50:86:d7:93:f5:66:31:bf:7b:33:be:13:
24:30:ba:3e:af:ce:43:cf:f4:12:ba:eb:49:bf:85:cc:e8:4d:
98:5c:60:28:dd:c2:bf:66:7d:64:77:11:79:8d:be:1e:49:02:
68:67:3e:7c:79:f8:da:a6:52:2e:9e:dc:9f:63:a8:d3:d8:d4:
8a:c1:43:d2:6a:01:ab:39:cc:54:91:20:13:a2:67:f5:e9:8d:
70:2d:83:86:2c:c6:f0:40:0f:46:f5:b1:8d:d3:79:8e:cd:50:
53:eb:48:1e:c6:ee:fd:da:c5:94:c9:25:51:12:f9:da:2a:ab:
ab:c5:21:b4:7e:f7:80:17:1b:77:48:a1:87:4e:c3:84:6a:d4:
7a:b6:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:06 2025 by rpki-client