Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: U5qvdXrQ/I9HFjrfeKcd2KHc0JhPhuQAK8xFsYvbAz4=
Subject key identifier: A3:5B:6A:72:F7:D8:D1:36:AB:53:A8:74:65:9A:1A:3E:A0:BD:0B:3B
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 0197B5C4E5ED92BEF6CE7A75BFBE858FF92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 08CF
Signing time: Sat 28 Jun 2025 09:01:09 +0000
Manifest this update: Sat 28 Jun 2025 09:01:09 +0000
Manifest next update: Sun 29 Jun 2025 09:01:09 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: +gdxgps6GB08pFZ0C8HZELlOctntdTSjzh5yVYzSptU=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e5:ed:92:be:f6:ce:7a:75:bf:be:85:8f:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jun 28 09:01:09 2025 GMT
Not After : Jun 29 09:01:09 2025 GMT
Subject: CN=a35b6a72f7d8d136ab53a874659a1a3ea0bd0b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:f9:27:82:54:5f:c6:dd:1c:61:8c:99:33:
d6:57:cc:3f:3f:0e:89:7a:7f:3e:1f:dc:43:a3:c2:
fe:d9:1b:d3:9c:c2:51:65:51:4a:10:c3:3f:ac:27:
1c:fe:d2:83:4b:0d:6f:2b:18:a0:fd:c7:05:98:b8:
39:f1:4e:62:9a:8b:32:21:56:a2:fb:af:ec:7b:ff:
11:be:7e:fc:b6:63:5c:7c:8a:9e:89:e0:20:6e:79:
76:18:05:16:93:31:d6:a4:26:d9:d8:59:f3:83:9c:
e1:36:38:93:7c:b2:e5:ee:4e:4f:9b:a2:22:db:10:
5a:de:b2:09:62:96:a7:48:13:0d:88:f9:e7:b1:1a:
4d:a9:db:0d:68:ce:39:15:6b:72:53:50:ce:ba:9b:
89:f5:39:ff:8d:cf:e2:cd:f2:19:6e:02:02:01:b0:
19:4b:1e:7f:52:4a:6c:8f:d7:17:7c:1a:6f:45:da:
15:f7:8a:04:f3:69:b0:0d:29:fa:61:35:2e:9f:57:
b5:3c:e2:33:04:62:fb:88:6a:e1:95:f3:c6:23:9d:
0b:1d:26:42:85:2e:2c:8f:38:25:0b:71:91:80:46:
76:f6:88:74:bd:e3:86:2d:23:f6:3f:17:ba:da:fb:
c0:25:ad:71:95:32:e3:46:12:76:60:40:57:3f:40:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:6A:72:F7:D8:D1:36:AB:53:A8:74:65:9A:1A:3E:A0:BD:0B:3B
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:74:48:d6:08:26:02:22:ce:2e:0d:e0:20:68:4a:31:36:8e:
9b:64:bb:c1:36:8b:32:28:cf:6e:46:b2:9f:1c:6a:be:e0:6a:
46:a0:b1:93:1f:85:ab:11:1e:70:9d:7a:72:0a:87:04:a3:49:
1a:27:b7:60:c6:47:a1:4a:81:4a:43:9f:e7:4e:19:9a:85:ea:
1f:98:39:ad:47:d0:44:ac:9c:b5:02:68:16:a7:0b:fa:22:ba:
3e:f5:ce:56:6f:0d:cc:87:81:aa:5e:6a:5d:42:63:6a:b2:a9:
77:48:af:eb:fa:15:37:5e:3b:32:42:95:6f:e5:ca:29:84:44:
9a:53:ab:55:56:f0:10:2d:4f:27:4d:51:4d:75:3c:c0:4b:8f:
79:89:3b:34:80:21:c7:37:89:55:f3:fd:5c:84:bb:63:b5:e8:
1b:a0:1c:f7:e5:27:c2:16:72:48:37:85:14:b0:23:fa:a8:27:
5f:07:1d:1d:0c:aa:e6:4d:a0:38:c4:58:0a:9d:e8:57:52:06:
d3:43:5f:c0:ed:ca:05:85:62:1e:30:fa:f0:aa:b0:a8:d6:49:
21:21:c9:de:d9:57:16:0a:f4:a4:97:ab:66:b8:21:70:cc:20:
74:3c:69:3a:fb:75:55:55:0e:4f:46:f7:48:37:f4:60:48:02:
16:56:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:10 2025 by rpki-client