Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: G9gJWmVTZTq9blOoiFEqT3w9CaRCiMHQ4XgcjxTitwo=
Subject key identifier: 5F:A3:D0:17:46:69:F0:96:56:3F:2D:F5:4A:0B:DD:03:BD:EA:B8:C0
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 0198D583CAEAEB9E3CECC494F720400FBD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: gehOanKFKSXCWrzNFEYm6vkruPHh9vFwexzhNJWKDRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ca:ea:eb:9e:3c:ec:c4:94:f7:20:40:0f:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=5fa3d0174669f096563f2df54a0bdd03bdeab8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:f4:93:3e:06:1b:5a:25:e5:8c:11:53:38:
f9:06:a1:75:0a:e8:42:4e:3a:2b:b6:ac:d5:36:aa:
d4:12:fa:9e:3c:9a:7b:ff:bf:13:c6:f7:90:9a:91:
6b:8d:c4:4c:17:5b:d7:7d:d0:23:f6:a5:3a:33:8a:
6f:1b:cf:12:0a:d5:18:98:0b:33:c3:50:e5:23:65:
f9:7e:81:1a:1a:11:6f:e1:a7:5e:6e:e5:67:db:0b:
5c:fe:b7:ab:14:d2:91:55:26:82:ce:f8:e9:94:b1:
00:3b:25:24:57:33:2c:f6:58:88:1f:de:9c:c6:87:
f8:78:f5:43:50:4b:a4:cd:b5:6c:1e:4f:19:0a:c0:
79:89:df:e8:6f:b8:65:aa:a4:61:03:d6:67:b4:35:
4d:3b:10:99:2b:28:2e:d6:a5:ac:f4:38:01:60:e4:
aa:20:98:57:21:4a:3c:98:0f:a3:ff:5b:8c:97:a4:
c2:0a:fb:c4:f6:9f:55:32:f4:5a:b8:06:75:b0:c7:
cd:6f:7e:7f:49:28:5f:1e:6d:80:fc:7b:50:a5:a4:
d2:43:d9:48:ca:75:fd:ef:3c:a9:03:58:f7:f2:16:
91:08:7e:3b:d9:f7:52:0b:da:9f:88:f8:3e:fc:ac:
04:05:7b:63:6c:12:bf:c3:ca:fb:80:42:6c:8b:7c:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:D0:17:46:69:F0:96:56:3F:2D:F5:4A:0B:DD:03:BD:EA:B8:C0
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:2b:86:fb:8f:36:d2:a6:34:67:d1:f3:63:9d:fd:27:0c:
a5:e2:e9:04:37:02:f9:e0:0a:60:0c:24:1d:c5:fe:62:44:0e:
e1:ee:68:a9:87:e4:27:3c:d4:bc:0a:da:18:4f:61:ec:88:b0:
c1:c4:cf:40:9e:f8:f0:e4:67:4e:e2:69:91:24:c8:30:f8:9c:
f9:6c:a0:2e:ee:76:73:e0:cc:ce:88:4a:e7:c7:31:e0:53:be:
c8:74:23:e1:de:d5:d2:2f:1e:a8:c8:cc:d5:df:cf:e1:bd:28:
f7:4d:bd:31:78:ab:02:c2:db:9a:47:2e:f6:66:e4:83:03:a7:
04:e0:47:a1:16:99:67:f7:c1:ae:71:ab:3a:75:55:c5:07:fc:
60:e4:ed:60:ba:86:92:16:0e:f0:44:c1:0a:84:ef:a9:94:3c:
41:58:e8:1e:42:45:c7:21:06:ce:34:c2:a5:20:57:83:52:db:
d4:3c:31:78:ff:24:1f:a2:2e:6a:d7:eb:47:52:66:27:a6:31:
46:99:f4:c4:b5:8a:b6:e1:e4:95:09:c1:a5:71:d3:6e:ed:48:
06:33:a4:35:aa:4b:e4:f9:da:62:f0:51:1d:14:af:c9:96:61:
61:f1:d7:85:8b:87:b5:01:f6:39:08:96:49:31:32:fd:7c:b0:
b8:83:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:05 2025 by rpki-client