Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: 4Y9vVvtqCXL7NqN7GGIPkrC7eMVuRuDUfAkc6BwhdRA=
Subject key identifier: 58:6C:18:32:1E:02:D0:46:53:D7:C8:69:06:55:B4:D1:C1:B4:06:5F
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 0198D773B0BB7DDCE3786D32A9B8D2CB13B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0965
Signing time: Sat 23 Aug 2025 15:02:19 +0000
Manifest this update: Sat 23 Aug 2025 15:02:19 +0000
Manifest next update: Sun 24 Aug 2025 15:02:19 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: xlzxPQzooeAwsO1bOaC1E/XTRecVdeKU8dEoT0qLEo4=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:b0:bb:7d:dc:e3:78:6d:32:a9:b8:d2:cb:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Aug 23 15:02:19 2025 GMT
Not After : Aug 24 15:02:19 2025 GMT
Subject: CN=586c18321e02d04653d7c8690655b4d1c1b4065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:75:fc:f4:f2:1d:c7:70:84:6e:06:97:69:
06:d0:00:be:d0:32:74:95:82:c4:a6:bd:f0:0b:58:
4a:c5:ef:54:6f:5e:26:88:05:f7:90:a6:0e:35:02:
3d:3c:59:8e:95:29:1f:62:2d:07:af:93:6e:3c:cc:
0f:9d:2b:ff:90:5e:cb:92:47:3f:71:89:40:56:75:
4c:9f:a8:24:ea:4e:a0:d3:18:50:54:e4:52:ea:ed:
63:7f:b6:d0:7b:56:86:27:24:e6:be:07:ea:b9:21:
d6:c2:3f:ec:61:56:2b:4c:f4:5f:92:63:65:52:9e:
4b:b9:da:23:5f:52:28:08:1a:10:4c:0f:4e:c1:04:
d7:a5:a8:08:46:c4:7a:f9:80:75:2a:43:94:2b:c8:
1c:a5:20:d6:14:ea:05:9c:db:60:15:22:82:f6:39:
ce:79:63:76:20:d5:6e:d3:9b:f9:a8:97:c6:67:33:
a0:5a:b3:80:af:50:93:26:a6:29:d2:be:5a:75:d1:
de:1d:af:73:18:1f:5f:40:f1:e3:6f:ca:96:f7:20:
74:e6:22:60:c0:78:03:23:67:b8:47:7b:ec:9d:86:
d7:ec:50:b3:cb:ae:66:6d:6d:60:c9:4f:e0:3b:34:
a4:aa:06:96:20:d7:ad:6b:15:4f:5f:52:7c:89:f7:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:18:32:1E:02:D0:46:53:D7:C8:69:06:55:B4:D1:C1:B4:06:5F
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a5:75:28:ff:35:97:f9:7e:d5:79:58:4a:e6:dc:7a:0c:a2:
8d:4c:3f:61:7a:6b:28:87:5b:a5:7f:33:a0:b7:c0:16:e8:90:
77:7a:ca:e4:a9:69:99:c6:55:ae:dd:05:f3:98:ed:e3:76:59:
ef:21:c0:4e:83:8d:42:51:6d:d9:cc:17:38:87:0e:80:09:f0:
17:2b:9f:b6:27:3e:d3:12:52:fd:5a:fd:71:5a:ae:f3:1b:7e:
45:56:de:67:af:a5:fb:f6:1c:d4:b7:08:dd:04:62:a1:d3:f7:
d9:d7:12:6b:85:f6:ca:6f:a6:eb:40:a2:e5:c9:2e:07:ff:9a:
62:74:db:e1:75:8a:1c:83:7d:a1:79:50:4c:27:0d:5a:7a:e0:
cd:d6:41:d7:24:63:8e:d9:7a:f4:9f:d5:80:2f:e7:09:ed:3a:
6e:dc:05:5e:ef:dc:2c:d0:d1:57:31:79:7b:37:36:14:45:42:
63:37:6b:23:b3:73:3a:93:8f:f5:23:d3:d6:47:a3:f4:27:a6:
ed:a7:95:81:81:6d:05:2b:b6:ac:cb:2c:0d:5e:a3:a1:72:80:
ae:c8:d2:06:63:17:86:b8:e1:ed:e0:5e:74:82:c4:12:1e:64:
36:8f:3b:cf:da:40:fc:1b:98:24:10:1e:b5:80:62:ba:c6:99:
3c:51:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:56 2025 by rpki-client