Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: 8EvaQXKE1nFtG1FqoTwRErFnV1Em9N9r65y62OCp7ME=
Subject key identifier: B0:60:73:07:60:97:80:63:28:C0:7B:D3:DE:80:65:D3:17:5F:C0:7B
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 0198D70605017E02AB9A5BD72272E7252B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: KBD385Rwi0QtW/BVJ8IQtT397nwP2gPU+v/gc1TFQVk=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:05:01:7e:02:ab:9a:5b:d7:22:72:e7:25:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=b06073076097806328c07bd3de8065d3175fc07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:bc:70:37:35:15:51:e2:79:3c:65:90:eb:
42:3d:53:d9:09:b0:bc:f4:3c:d1:39:ad:98:95:3b:
c5:e3:b6:86:43:e3:4a:33:e0:3a:b1:d7:e5:23:6d:
3a:36:de:31:b9:7d:5c:93:48:0c:cb:8f:2e:82:01:
a6:2a:a8:42:07:3c:14:11:c2:b2:20:29:2e:58:c2:
27:ca:6b:e8:9d:25:50:9a:6d:4e:dd:ce:60:8e:3b:
db:db:7b:9c:f1:0d:e5:f7:dd:aa:a8:0e:da:f2:e6:
1e:fe:15:ad:ec:10:21:80:c3:d6:98:ab:3d:33:0a:
f5:1a:7f:96:81:ef:9a:8b:f1:3a:31:eb:7a:c7:c7:
57:fa:7a:19:49:06:33:56:e5:ae:ec:ee:e4:0a:21:
16:1e:eb:7f:a3:bd:a5:76:ed:24:af:e1:03:66:f7:
5b:58:11:e8:ca:22:97:8c:93:0b:b5:ce:3f:a4:49:
b9:83:14:9d:9d:73:65:53:a7:29:35:de:51:d0:52:
b4:27:6b:ba:1a:d1:20:1f:fb:4a:7f:a4:31:c8:68:
6f:56:ab:a0:da:18:e2:53:3c:94:23:aa:6f:d0:91:
76:fd:09:3d:a7:af:25:72:e6:e5:76:17:75:53:c5:
a1:0a:8a:8f:2d:7d:e8:3c:51:6e:87:0a:55:17:20:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:73:07:60:97:80:63:28:C0:7B:D3:DE:80:65:D3:17:5F:C0:7B
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:6f:23:9f:ca:0b:1e:fa:82:c3:34:8f:6a:c2:84:09:8d:
d4:c7:65:ee:6a:4f:b3:1c:77:62:1d:8d:61:af:5e:1d:0b:c9:
85:18:d2:d0:12:1a:2a:cf:2d:4b:38:14:4c:0b:51:d0:95:0e:
ea:b3:2d:22:83:24:07:56:d7:ea:ae:19:a1:53:c7:e5:4b:20:
45:3a:17:d3:cc:c5:c1:49:4b:c2:c6:df:3a:31:57:5a:07:a8:
dc:51:a3:db:8c:de:51:eb:61:c6:9e:e1:99:ba:9e:7b:2d:ed:
34:16:4a:1b:66:a6:50:05:80:0a:9d:23:2a:f1:a0:02:d7:18:
c0:7e:77:29:ff:61:ea:87:6e:fe:74:1e:ed:cc:d9:1a:50:5f:
35:75:e8:19:b6:d5:76:2b:c1:ac:e8:d3:56:1f:a0:6d:3c:6c:
aa:c6:42:d3:f1:32:92:29:ec:cc:76:1e:06:7e:2b:3f:82:38:
92:b7:ac:31:a5:85:ea:a0:5f:80:a0:67:50:bf:2b:be:f9:a4:
90:5c:29:b2:ea:38:70:20:f1:ac:d0:4b:44:7a:fe:d9:07:75:
2d:b3:01:da:77:bd:52:fe:34:3c:33:24:6d:11:ab:43:75:8b:
38:7b:66:60:af:44:38:f1:e4:70:df:6f:91:0c:ba:20:58:c8:
07:38:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:40 2025 by rpki-client