Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: px4wUlz/cJRfuqPXpqgpHSMMuzqoS2mRwiWgdN0A5lg=
Subject key identifier: 24:1B:D7:CA:AE:D4:D7:85:0A:9A:1B:9D:FC:BA:69:67:C4:2D:DA:59
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0198D73BB1D41DE298C9A47D22F40EFC4DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 14:01:10 +0000
Manifest this update: Sat 23 Aug 2025 14:01:10 +0000
Manifest next update: Sun 24 Aug 2025 14:01:10 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: 61VU7p9fiyTrMlyMYc34dMCoRBzKaFu6N+TPu9aAmTg=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:b1:d4:1d:e2:98:c9:a4:7d:22:f4:0e:fc:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Aug 23 14:01:10 2025 GMT
Not After : Aug 24 14:01:10 2025 GMT
Subject: CN=241bd7caaed4d7850a9a1b9dfcba6967c42dda59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:21:84:2d:98:0b:5f:5c:03:02:05:eb:7c:
e3:3e:89:af:d9:20:b6:ba:3b:9a:54:2d:95:0f:bb:
87:9a:a1:6d:91:18:26:55:29:31:9e:b8:77:5a:02:
b8:0e:4d:7f:4b:43:24:7e:d2:49:05:71:a2:f4:7e:
1f:e4:72:44:44:8c:d1:12:3d:fc:0a:0c:e5:db:ce:
b0:20:f9:9f:9d:61:6d:45:dd:56:e8:8a:21:fd:f6:
96:3e:80:d7:fe:75:6b:2c:bf:5e:3c:b0:bf:25:51:
f8:06:ac:a2:a1:1e:60:d0:c3:eb:3b:bc:77:c1:77:
55:9a:19:7e:c7:90:fd:70:65:da:36:69:f8:15:45:
04:44:14:f7:8e:4f:6c:f8:9e:37:c2:3f:d1:12:ca:
f5:6a:66:74:9d:12:f9:4d:bd:33:29:f6:77:58:df:
1a:c8:ca:52:51:7b:0b:8c:ab:44:76:01:f2:94:80:
ab:22:56:64:f0:06:f7:9d:40:2d:66:e3:b0:9d:af:
59:c3:b0:ae:03:ad:a3:a3:54:95:ad:2c:b1:42:95:
22:94:89:41:c9:5a:3c:72:8c:74:43:a8:b5:ad:b4:
b0:16:29:96:3c:d6:ca:a7:e5:20:19:63:d8:24:61:
47:8f:20:1c:96:ef:c6:8d:86:a5:5d:3a:6f:6f:6a:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1B:D7:CA:AE:D4:D7:85:0A:9A:1B:9D:FC:BA:69:67:C4:2D:DA:59
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:8f:c3:e7:bd:69:87:8a:8f:2e:42:5c:65:34:fc:95:18:
2f:2c:53:b9:41:f2:ae:83:30:99:76:04:21:79:80:15:8c:ab:
b4:08:52:60:3c:93:13:95:ac:ba:f3:92:fc:09:aa:13:2e:0c:
ac:39:1a:5a:40:67:84:f8:60:e1:12:81:de:0a:b8:ea:ae:25:
dc:7e:22:06:0a:58:f3:17:5e:a8:1c:24:aa:5d:1a:f6:8e:3e:
d8:23:da:64:61:c1:0e:66:e4:bb:57:36:33:fc:a1:59:6d:b3:
bf:f9:29:90:ba:c5:04:d3:bc:82:1b:e1:b4:49:79:9f:29:fe:
a4:7a:23:c5:ef:15:20:bd:d7:ea:68:4d:10:15:67:15:89:9a:
b3:bf:7a:cd:8a:86:6d:6d:9a:56:e3:94:d6:be:a1:c1:90:4b:
37:cb:36:fe:76:39:99:77:9a:07:22:f1:81:7a:a2:e3:56:c8:
ef:d8:c7:5d:e8:55:b9:41:fc:13:5e:50:48:a3:d2:ab:f1:cf:
37:fb:4e:5e:62:09:c2:7f:bc:d6:9a:4b:fe:a8:19:57:86:30:
22:23:42:f1:36:d9:ae:3b:4e:5f:be:a5:a9:82:84:8d:29:8d:
3b:fa:7a:11:9e:3f:ff:31:c2:62:27:d2:90:d6:84:8a:29:7f:
41:43:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:03 2025 by rpki-client