Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: 3QNEMpZJC5ZT+Pfra+cbuRVoS+fVVo+gQoAj3U0BJUM=
Subject key identifier: 93:BF:93:5F:F7:CB:CB:75:48:8D:A5:E1:47:6F:27:69:D3:48:67:14
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 0198D8514009B832C750A945F36BAE73F895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:04:20 +0000
Manifest this update: Sat 23 Aug 2025 19:04:20 +0000
Manifest next update: Sun 24 Aug 2025 19:04:20 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: Cdx974l752UEbLKQBxcPRdVw9pEaYXGJl+ht3uS83Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:40:09:b8:32:c7:50:a9:45:f3:6b:ae:73:f8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Aug 23 19:04:20 2025 GMT
Not After : Aug 24 19:04:20 2025 GMT
Subject: CN=93bf935ff7cbcb75488da5e1476f2769d3486714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:e6:a4:b3:20:ed:60:6e:ac:02:e6:9c:b8:
35:a8:7f:61:c3:b9:11:97:ed:d2:bb:f6:23:0e:0b:
3b:05:ac:a9:2e:9b:7a:d9:56:fb:60:d5:11:50:3b:
d9:7c:fc:22:b8:11:bd:a3:e8:89:2e:13:18:a3:d2:
8d:8a:7b:54:ff:f6:d4:8b:ee:59:28:9e:94:82:f2:
db:c1:24:42:ee:39:f3:d5:8a:19:6e:40:d6:1f:71:
11:0b:b8:01:de:fd:eb:6f:a3:1b:9a:11:c2:96:b1:
c3:d9:5e:1d:08:24:42:6f:f2:f6:7b:77:9b:db:9e:
7e:20:7e:e3:f0:87:55:7e:c3:88:95:29:c7:ed:0e:
36:72:85:91:bc:b3:df:0c:8f:6b:29:ed:a1:4e:aa:
ff:53:52:16:fc:18:ac:b5:18:7f:69:43:7c:07:75:
ef:76:62:02:d4:06:76:41:ac:3a:38:84:3a:35:7e:
3c:7d:d9:8b:e4:54:10:0a:dc:08:3e:bc:83:f1:3a:
e9:d0:c1:55:7f:6d:59:08:cd:06:3e:8b:a1:99:89:
66:1e:9f:d2:d8:50:26:86:d4:4e:c0:b1:4e:d1:cb:
e8:48:34:54:79:4d:ca:aa:a6:b6:57:22:ce:bf:0c:
0a:cd:9d:fe:ef:f4:88:49:26:15:43:6b:ce:ec:a2:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:93:5F:F7:CB:CB:75:48:8D:A5:E1:47:6F:27:69:D3:48:67:14
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:77:77:26:94:4a:7c:4a:13:55:27:40:fb:65:95:5d:9c:72:
97:b2:8e:b4:9b:60:29:d3:e0:ce:03:6d:73:0c:09:ba:1d:bb:
17:1c:26:fe:a3:86:ce:28:54:82:d5:bf:7f:3b:ce:d0:67:b1:
d8:ca:f7:4e:a1:05:7a:df:f4:64:8d:17:4d:0c:45:30:c7:4d:
55:f0:bb:6f:f5:b1:08:c7:05:f5:d7:cc:c9:05:1b:fe:32:7c:
f9:97:90:46:27:31:5e:7c:66:5a:9e:00:89:a1:ec:cc:dd:24:
f9:f6:c6:d3:73:0a:fc:a7:91:47:1e:66:d3:6c:f1:25:85:6c:
5b:75:dc:af:66:b0:b0:95:7a:11:2f:3e:98:e4:23:f5:1f:51:
06:9f:3e:14:cc:66:1a:02:9f:d3:e7:4c:39:a3:d3:67:69:45:
22:bc:5d:2f:8e:b5:b2:57:08:fd:c4:11:01:b1:8d:16:63:8a:
ae:70:62:24:62:ae:8c:f2:e9:08:4c:b4:62:3d:e4:ff:ba:92:
df:53:63:9d:f7:66:d6:63:7a:07:a4:7c:c8:14:ae:9a:ad:32:
69:3a:35:56:30:bb:d3:d5:d8:76:70:1d:8c:35:2c:a4:0f:27:
c6:1c:d4:aa:b4:89:f8:37:c3:4b:0e:b3:08:d4:04:a4:6b:45:
d3:17:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:29 2025 by rpki-client