Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: VTS9juc/NoQUbVVKGJ3dhpVr/Au5FXcVXbxVfBQV45g=
Subject key identifier: E5:AB:28:38:C4:85:2B:D2:89:9D:F4:BA:8B:8A:6C:BF:95:1C:F3:98
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0198D5BC32B4E95C2179C9260E0EA7278187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 13A5
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: 5Yg8tKclt8mXkB8HodCgOWVUW+XSI5O6Zo/RocE/Xmk=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:32:b4:e9:5c:21:79:c9:26:0e:0e:a7:27:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=e5ab2838c4852bd2899df4ba8b8a6cbf951cf398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:08:b1:03:30:b8:d7:05:0c:10:95:e7:b9:
2a:e0:f7:48:fd:72:05:6f:f9:7d:8f:a6:0c:37:30:
d7:c7:e3:7f:e0:73:23:5d:ba:f4:e1:74:e2:bd:9b:
f6:05:97:5d:b9:bc:9a:6f:8d:6a:4e:fd:71:d1:13:
1f:2f:bb:53:1c:5e:e3:ed:a4:42:a7:91:2a:c3:b6:
8c:84:79:00:1f:b7:2f:d3:79:c1:4d:85:56:60:b8:
bf:d4:0f:7b:88:f0:49:19:56:32:9b:07:66:16:e3:
79:90:72:75:18:60:9f:d2:b5:26:34:65:1f:7a:61:
03:c3:67:cd:8a:78:bc:75:1c:3a:c4:a6:5a:0d:1f:
6d:20:3f:5e:cf:c1:08:3b:2a:79:be:48:f1:5e:91:
b0:9b:85:b0:c2:22:f9:27:10:2d:3c:15:c4:52:00:
9b:a6:8e:be:c2:ff:5e:ce:2e:36:b7:7c:df:22:ab:
c9:b1:63:2b:d9:a4:8a:43:aa:0f:67:1e:a1:9a:eb:
9b:22:8c:98:e9:9b:71:f1:59:8a:ce:d5:6b:46:d9:
e8:bb:51:f0:1e:d7:ec:aa:fe:c1:07:de:dd:67:95:
c8:97:f6:da:67:d7:5a:26:58:e8:88:63:2b:82:ea:
0f:39:15:21:06:5d:48:8f:29:62:d4:06:2d:61:02:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:28:38:C4:85:2B:D2:89:9D:F4:BA:8B:8A:6C:BF:95:1C:F3:98
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:e1:34:1f:ea:5c:32:c5:4b:45:88:f9:ce:77:a8:ef:ca:
18:80:82:ff:ea:ba:4f:84:f0:72:d6:4a:a0:c8:59:2f:fb:c7:
ad:a6:75:fb:50:d3:56:df:62:7a:e3:74:0f:29:ff:b3:81:8c:
6d:5a:ca:7b:c0:b2:76:53:cd:49:01:d8:d2:f9:22:48:6f:69:
30:96:22:8f:63:74:92:99:2d:10:1a:13:21:f1:66:2c:d2:72:
8e:3f:1a:22:11:5a:f1:34:08:0a:8c:23:b8:62:11:b1:15:09:
80:49:da:3e:88:84:c3:3e:cb:b9:9f:59:34:6d:e6:2a:5c:3d:
85:92:39:c6:39:5c:ff:e8:47:2c:3d:93:46:62:9a:d2:24:d5:
9e:a4:5f:95:7a:1e:b1:29:af:ad:4f:ab:70:50:ff:a5:20:4c:
c5:77:f3:43:9f:ee:12:c1:7c:f7:ee:3b:2a:4f:c3:7e:30:8c:
29:89:6b:1e:c3:33:01:56:c4:89:66:06:ca:c6:5a:29:c1:ad:
f4:17:12:e8:80:24:b6:25:5a:e4:a6:dd:77:23:59:0e:00:c0:
82:cf:49:cd:1b:36:ce:72:b2:63:cd:8a:19:c6:b0:78:0b:31:
a3:66:7b:06:83:49:09:97:45:7f:81:97:31:1a:56:72:56:d5:
79:77:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:10 2025 by rpki-client