Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: o+ugZyFwpln6A+XVEXjYZ9z8/38THAQkhhZ2IKw+CTg=
Subject key identifier: 5A:FD:CE:2C:86:AC:F9:BF:7F:6C:9E:14:16:73:C8:D4:6F:6C:13:8E
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 0198D65F14AA0168A1FF501739CB96D40DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 041E
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: uQRB7c0vq2iy3A5+om63yihc65L0NYXKsWbv/PQhhH8=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:14:aa:01:68:a1:ff:50:17:39:cb:96:d4:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=5afdce2c86acf9bf7f6c9e141673c8d46f6c138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:27:7f:4d:4a:f7:fc:4a:39:ed:f7:49:43:
11:05:bc:12:b9:b9:29:76:46:90:71:28:12:a8:17:
d5:3b:8a:5e:8f:6d:86:0c:54:d0:7d:e7:c8:48:5a:
c8:7c:94:9c:ea:52:65:fd:39:94:13:d2:c3:a6:25:
cd:a5:9a:da:6a:eb:53:f4:91:55:3d:66:17:57:f6:
8b:6e:48:d4:e5:b8:ba:57:24:f9:d5:18:ca:2c:20:
49:78:b8:5e:3f:42:ab:40:86:6d:ef:d8:d8:02:45:
3d:56:c2:ad:9c:2c:01:49:87:1a:cf:9c:a0:43:f2:
80:cd:3a:81:11:0e:93:68:5f:95:39:02:ed:f7:51:
50:cf:76:a1:c6:45:f3:c7:b6:7f:5d:82:17:2c:5a:
55:4d:40:c0:37:51:7a:ed:6c:c2:f3:fa:6c:21:d2:
31:e1:2e:c0:9a:71:fe:3d:ff:db:ac:79:7c:3b:cd:
33:06:80:d7:95:2d:dc:8c:51:a0:d3:2c:37:ea:a5:
3a:6b:49:f4:81:1a:9c:e3:18:f1:2b:71:ea:32:c0:
02:97:ec:10:83:d3:30:7c:e7:d5:ea:99:61:e0:de:
04:be:0f:77:c6:21:c8:a9:36:96:65:4b:89:30:7f:
ce:36:3b:ca:2b:2c:4d:f1:6a:1a:ae:5b:72:fe:f6:
68:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:CE:2C:86:AC:F9:BF:7F:6C:9E:14:16:73:C8:D4:6F:6C:13:8E
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a6:64:ad:1c:e5:6c:92:4d:74:39:83:4a:3e:e4:e6:6c:c9:
8c:d3:0e:3e:d4:73:8d:cd:80:54:48:4c:20:99:bf:2a:58:0c:
ca:0a:85:ba:2c:c4:7e:e7:ae:88:33:6b:f4:ed:7d:c5:f8:60:
47:65:2f:cf:08:b6:40:86:92:fb:73:7d:d3:64:9b:d0:50:82:
5a:41:ec:a1:5d:6d:f1:82:de:97:8d:d5:12:bc:ac:03:cb:a4:
63:60:7c:ea:57:3e:9f:9b:c1:10:cc:d3:d7:37:f2:90:5a:1b:
fb:81:9c:cc:48:62:10:e0:e9:e5:c6:9c:96:4b:67:a6:59:9c:
85:a1:90:63:c9:c1:6f:89:3e:cc:04:46:98:ef:d2:1e:ed:82:
23:4f:41:a5:ed:26:fd:9d:2c:6c:a6:a7:cb:79:ed:fa:c0:dc:
d6:47:1f:f4:a0:80:d6:f8:ba:11:71:49:6f:65:6d:5b:cd:42:
1d:8a:61:07:ae:8d:5f:51:37:04:24:45:af:ae:b2:43:05:58:
3e:67:91:49:dd:48:e9:9c:85:e6:b3:8c:83:8d:bf:ec:97:a1:
6d:c8:c2:00:ba:ac:f3:71:86:1d:80:c7:09:38:53:fa:a0:6f:
a3:e2:22:56:fb:9c:f2:79:cd:1b:9d:9e:25:ec:16:2d:39:eb:
69:d2:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:18 2025 by rpki-client