Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: 216emPWGAaSELf16tyJXElekDFuTD214NFAMZoL+8hU=
Subject key identifier: AF:4B:A0:90:5E:4F:13:9D:6A:F3:6D:D3:D4:4D:4C:93:5A:32:68:DD
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 0197CD2833F9E19C25858F447D0981B0174B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 08A0
Signing time: Wed 02 Jul 2025 22:00:53 +0000
Manifest this update: Wed 02 Jul 2025 22:00:53 +0000
Manifest next update: Thu 03 Jul 2025 22:00:53 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: BsmhcTvoZmKGfYo8F0yOBmC+Y0YjOR2aQ7wzJSa2Q4s=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:28:33:f9:e1:9c:25:85:8f:44:7d:09:81:b0:17:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Jul 2 22:00:53 2025 GMT
Not After : Jul 3 22:00:53 2025 GMT
Subject: CN=af4ba0905e4f139d6af36dd3d44d4c935a3268dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:36:03:ed:3f:7f:2a:9e:c0:5a:5f:35:53:
8d:93:47:14:94:b4:fc:0a:f6:37:dd:8d:e8:52:7c:
14:28:ef:81:2d:b0:31:7a:5a:73:ea:3a:90:07:06:
47:95:53:e7:43:07:70:ed:4d:2a:d1:ab:b1:0a:6e:
db:37:d7:01:fa:00:b3:f4:a3:39:49:1f:3e:e2:f4:
e8:01:ac:0a:db:dc:45:a8:41:4e:93:5b:90:5b:a3:
3e:b8:73:e0:61:a4:b2:69:79:d2:f7:10:48:a3:6b:
6c:33:29:e4:da:08:11:f0:0e:ed:6e:79:7f:67:9b:
b1:43:2d:89:8f:fd:ba:f8:64:50:d7:92:f0:51:11:
2b:3b:a4:7c:10:fd:06:50:bf:31:f9:da:bd:b1:e6:
db:e0:77:76:94:19:1e:bf:35:d8:18:0a:a5:2c:ad:
b4:a8:86:39:2e:49:b0:75:8d:e8:7f:ce:b1:49:76:
4f:9c:1b:61:7a:e6:dc:91:86:ea:00:c7:23:eb:21:
8d:9e:02:a2:5e:19:f1:5f:7b:f6:86:fe:70:a4:0a:
a0:c7:04:91:fc:79:1e:aa:3d:57:5b:a7:1d:39:20:
9d:79:6c:80:dd:4b:7b:c7:40:b4:15:ba:bf:94:46:
6d:d4:e7:2a:fc:3a:ad:ad:59:80:01:a6:1b:d0:e7:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:A0:90:5E:4F:13:9D:6A:F3:6D:D3:D4:4D:4C:93:5A:32:68:DD
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:90:91:3d:01:57:42:ce:b1:79:c6:1e:87:67:ca:ca:92:
67:67:78:98:16:25:56:7d:10:b6:8e:9f:5d:64:1c:a9:80:7d:
b4:fb:b2:04:ab:12:9e:50:d1:7c:f5:7a:90:04:6d:74:4a:2a:
72:6e:39:62:c3:a9:3d:26:e2:4b:c9:e7:86:0e:ed:1f:06:b0:
a1:1c:12:f7:c1:36:7a:c4:cd:cb:5c:ad:2b:8a:3d:0a:bf:12:
98:49:47:1f:56:a1:f5:1a:3f:12:2d:eb:6b:83:ff:09:ff:5d:
c9:4c:f8:2b:70:9c:cf:34:33:0c:da:c1:48:eb:9c:62:d9:6f:
f4:59:08:77:d4:b7:d3:a1:f1:c3:42:ad:7c:ad:ce:f3:ec:3b:
ac:93:25:2d:6b:cb:5e:1e:a9:43:c9:18:1e:ae:6a:ac:a4:68:
62:2c:7a:0c:5a:be:74:2f:80:bb:2b:d2:82:ec:49:fa:35:32:
a6:6e:23:74:f9:8f:52:63:e4:d2:7d:ef:22:8b:fb:0b:a3:7a:
b3:90:39:3b:b8:61:af:cc:30:40:e4:e9:39:77:a7:be:8c:d8:
c5:58:c3:90:2b:39:b3:61:22:de:26:0a:57:79:97:fb:c7:64:
ef:cc:4e:90:96:71:bc:25:37:16:c1:19:bb:79:fd:a8:02:4c:
20:fd:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:02:42 2025 by rpki-client