Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: AtKKUkEtDmiJG5ikU+Wh00wO88Cd34JkukT5+3Q31hA=
Subject key identifier: 3B:D4:82:9C:99:FB:E7:3A:27:8B:3C:57:47:3A:59:3B:7F:71:9A:C9
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 0198D583F65BD88B48CFDB568CB87A0C0F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: 8cp9KaA3x7XXnouVnYaK0RZX6biYsW9TnGFvSj6zziM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f6:5b:d8:8b:48:cf:db:56:8c:b8:7a:0c:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=3bd4829c99fbe73a278b3c57473a593b7f719ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:88:f6:b6:04:18:bb:1a:17:75:99:26:a2:
57:fd:07:c0:b7:5e:4c:b0:e7:65:0d:eb:d9:bb:dd:
b9:73:28:23:84:5f:b2:79:81:b5:7d:26:84:a0:99:
41:3b:33:00:3f:0a:8c:a2:9e:da:22:86:f2:d1:b0:
90:e2:16:dd:47:e9:1e:ed:ff:21:04:8c:48:be:3b:
50:71:0c:b3:c8:b6:2d:78:07:b6:a8:05:85:0e:51:
24:a8:83:65:2e:61:a9:08:51:46:ca:8e:26:a8:9b:
e8:e9:14:ae:59:21:b3:1d:61:5c:8f:a9:10:93:b4:
81:10:96:7c:2c:e6:7c:db:04:46:78:3b:8c:2d:7d:
7b:17:f9:4d:7d:e9:cf:b3:15:20:2e:1a:e6:7b:fc:
22:78:8b:9d:58:10:d4:49:7a:4a:fc:f4:65:b9:60:
a7:37:3d:c9:3b:42:6b:83:58:fe:eb:35:f7:2e:e3:
3a:27:7b:aa:72:24:2d:85:ce:20:36:9c:65:3d:91:
b6:b9:da:f1:6b:28:62:e7:11:11:63:0b:c7:9f:3e:
7e:b8:0b:51:39:ad:69:0a:c3:c9:ab:d5:4b:3a:9c:
c1:5c:a2:d9:4b:8e:07:c2:51:d9:ae:bb:3c:79:bd:
ac:db:e0:9f:93:2a:76:99:86:b9:76:0d:00:f5:69:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:82:9C:99:FB:E7:3A:27:8B:3C:57:47:3A:59:3B:7F:71:9A:C9
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f4:b7:82:2a:61:ad:90:0f:31:17:23:9e:09:ff:32:7a:d6:
43:35:94:fb:12:54:fa:10:3c:a0:6e:70:c2:64:14:88:4e:c8:
6e:23:d4:b8:09:03:ce:3d:da:0b:93:ba:d5:c6:a3:d4:1a:0b:
b0:e1:b2:c2:f1:3b:a4:d7:48:c1:16:54:5d:01:c1:b8:28:d4:
61:5d:30:79:a4:bf:58:0b:e7:f3:e5:23:fe:83:76:89:36:f6:
9b:e7:61:68:d6:10:94:e6:91:98:a6:32:3c:7e:11:c0:df:ac:
c6:6d:87:fb:8f:e3:81:17:6f:cc:06:cc:10:9d:00:de:40:18:
6d:d1:89:9a:b8:50:ad:5f:41:9a:21:e6:d6:dd:3c:b7:2a:7f:
bd:07:db:33:58:b9:52:9b:b7:6b:a2:ec:59:e7:d7:a9:28:1f:
d7:c8:3a:bd:cf:78:93:30:0a:a2:32:88:54:63:35:82:c2:95:
b8:2b:32:25:99:5d:8e:5f:8d:62:c1:6d:2f:d4:67:43:a8:2d:
d0:41:00:6a:e2:0f:c2:a2:f3:3a:08:18:d9:5f:b3:35:0b:5c:
98:a0:27:1a:da:36:9f:47:6e:a2:5e:17:72:1c:23:ce:61:c2:
52:4a:33:dd:c2:f2:42:24:20:41:81:77:ae:69:dd:95:c0:ca:
f7:e5:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:51 2025 by rpki-client