Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: BR0sIX6sCiR3CW8NDtK/cD+4UK72eTZWM40jz4FgYR8=
Subject key identifier: 23:D1:4B:A6:02:2F:E1:BC:A3:58:B6:5D:E3:DA:86:09:EE:EE:CD:65
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 0198D65FF7D14EC5F1785A63336A40BC6501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: +03Co+XdHoYpWB8M7aEsOQiwjU8bOrVGH5iZqjF/ny4=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f7:d1:4e:c5:f1:78:5a:63:33:6a:40:bc:65:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=23d14ba6022fe1bca358b65de3da8609eeeecd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:ec:52:6b:00:d3:b2:a8:c6:7f:0d:a5:3c:
92:b1:7d:9c:5d:c7:1d:96:20:f9:eb:bc:23:58:50:
6a:5e:ba:ff:21:44:e6:99:14:e8:d0:30:92:86:92:
8f:c7:b9:20:73:de:d6:4c:c5:eb:90:2c:7c:c1:4e:
1b:c0:f5:46:d0:f3:47:ca:e2:12:27:eb:04:8f:0d:
16:2b:d5:2b:f9:53:87:09:9f:b4:c7:32:0c:d2:27:
a7:ff:fc:9b:d5:1d:cf:a6:03:9d:92:7c:d1:a3:3a:
b1:18:6e:b5:c5:bd:99:34:39:1f:0a:92:d4:c1:95:
f9:0e:ed:ae:d3:b7:f7:b7:ac:e3:27:82:7f:ae:bb:
d1:d9:7d:44:db:36:52:b8:0d:d3:b5:c5:0a:55:e3:
1c:87:ba:4a:56:bb:7d:75:b0:ec:dd:29:5e:03:90:
78:44:23:6e:e3:dc:79:95:30:a2:d1:7c:38:ee:23:
eb:4b:19:7f:83:89:8c:fe:1e:8e:dd:fe:da:b2:5b:
d7:79:ff:65:f2:56:ce:a5:b6:da:ec:9a:e8:a3:85:
4a:92:12:91:6a:8b:68:93:49:b3:42:7c:b3:63:5f:
3f:aa:fb:f5:f0:7f:5d:cc:e0:cf:8a:18:de:84:ad:
b5:6c:52:c2:d4:e7:f4:49:4e:5b:ac:3f:48:7d:3b:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:4B:A6:02:2F:E1:BC:A3:58:B6:5D:E3:DA:86:09:EE:EE:CD:65
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:52:ea:74:1f:bb:29:08:f2:ed:d0:db:95:0e:16:55:6f:
54:3a:dd:10:41:5d:ae:bd:5d:46:a5:48:27:fe:b4:38:5f:44:
b4:c1:e2:fb:2b:9d:9a:1f:8f:42:e7:38:7d:81:33:38:07:db:
2d:99:fe:1f:ea:f4:6e:41:cd:aa:d4:32:ab:84:34:32:71:49:
35:3c:14:4a:0e:1f:f5:bf:35:2d:85:fc:4f:73:00:a6:62:d5:
97:d8:84:93:7f:20:21:69:17:03:4d:af:cc:5f:45:ef:d2:cd:
4f:60:e6:e6:ab:68:29:10:16:a1:d5:6e:f8:3e:f7:0a:6e:fe:
0e:1f:27:74:7f:8a:5d:5a:1f:60:75:a2:de:10:07:3a:58:75:
21:46:5b:5b:6a:99:56:af:6a:00:83:97:10:3a:d3:9f:ca:eb:
82:92:e2:c5:e9:89:0a:5b:e0:65:1b:e9:0f:51:b9:15:18:cb:
fc:b3:0f:6f:c4:56:e5:99:68:48:00:36:8f:4a:19:59:6c:48:
a0:d1:2d:a7:92:64:2d:18:33:a3:2b:ef:ab:7b:dc:c9:82:97:
98:7f:a5:5a:69:0d:7e:16:19:19:23:0f:3a:ec:e3:0e:a5:8f:
b3:85:8d:9d:25:79:8b:58:4a:7c:d3:79:0b:d9:37:72:33:50:
4e:82:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:45 2025 by rpki-client