Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: Vn11fOJrgBDC/+WoL0SIcNlPeE8T9q/3VGzbhAUUlEM=
Subject key identifier: BC:24:92:B3:08:1B:99:18:E3:94:ED:88:A2:47:A7:75:08:50:28:46
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0198D5BBCB491535485ADACE6DB3EDE7EB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1201
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: 6GFPumuNnFbQGqz8OX6q3SlosJlfexN+iGGeafGO9gQ=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cb:49:15:35:48:5a:da:ce:6d:b3:ed:e7:eb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=bc2492b3081b9918e394ed88a247a77508502846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:f0:ee:df:7f:9b:cc:3f:b8:12:10:8e:c6:
ef:48:2c:2b:1b:21:f7:ba:be:1a:2e:5e:2a:ee:3c:
fb:0f:c0:fe:d1:34:9a:5a:11:03:2e:52:80:e4:24:
5d:c0:b5:19:d1:0b:37:81:3b:ab:49:18:54:d9:ae:
1a:1a:9d:59:81:be:9f:70:d5:6a:95:49:f9:22:39:
5f:20:2e:9f:06:4e:99:1e:05:1b:17:cd:4f:eb:0c:
41:e4:3a:b5:78:00:4c:26:de:e5:e7:ac:15:36:4e:
99:ea:19:28:9f:ed:a6:7e:03:c0:55:ac:48:0d:55:
c9:cc:1d:42:9c:95:11:f7:68:e2:c0:29:b9:89:29:
60:51:60:f5:c8:ad:9f:23:44:fa:5f:39:9c:c9:0b:
5c:ea:89:a8:f7:b3:5a:28:b2:f8:0f:5f:ed:56:99:
8d:6e:a0:30:40:57:78:09:c7:d2:41:07:e2:91:fc:
20:80:18:6e:f9:0c:9d:7f:58:83:50:7e:39:06:53:
64:d6:4d:35:7b:81:cf:94:fc:d0:5e:4c:3d:ad:35:
83:e3:23:71:19:70:a5:14:09:8a:5b:ee:a3:ea:1d:
2c:b0:92:ea:87:45:5f:59:4e:e0:67:5e:ea:9d:9e:
a1:7b:f3:79:58:3d:34:3d:e5:0d:f6:74:64:44:03:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:24:92:B3:08:1B:99:18:E3:94:ED:88:A2:47:A7:75:08:50:28:46
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6d:9f:35:a0:45:47:c8:ba:1e:a7:75:e0:a3:75:99:c2:89:
2d:6b:0c:c7:9f:51:20:90:af:c3:0d:66:ee:1a:59:36:34:c3:
32:c4:f3:d6:99:6e:43:85:f4:47:c5:4f:85:ef:e9:72:32:9b:
90:e0:ec:84:db:2b:6b:d0:55:62:99:5e:b6:9b:f9:70:7a:58:
66:3a:c3:bb:ed:f7:3c:28:e4:4f:17:c9:8b:a5:38:50:5c:af:
b2:48:78:e0:e6:3c:f7:11:06:1a:fa:24:20:4c:46:cb:bf:33:
f0:e2:81:d7:f5:7e:87:a4:8a:32:29:49:7c:72:12:de:45:d0:
54:0c:1c:0c:cf:30:fa:14:1f:68:2f:c9:9b:b7:9d:f7:ac:e3:
91:36:b5:a1:25:aa:74:53:12:e5:2b:fe:26:a5:37:06:ed:a0:
80:4f:ac:99:c5:5c:0c:a0:db:bf:f5:01:b4:cd:bd:15:39:b8:
9d:5f:45:69:44:06:f1:24:f2:32:46:fc:b6:23:45:87:e3:40:
e8:5d:66:5c:53:3b:1d:b7:59:9c:04:49:4c:b9:17:ca:5c:8a:
d5:41:6c:ba:b8:7e:af:44:06:9d:03:78:12:28:1b:5d:75:c1:
67:b3:2b:96:c5:d9:c2:55:a1:19:b7:f4:53:a0:2d:b4:bb:91:
3a:db:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:14 2025 by rpki-client