Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: NbOP/ws75cslLTtO8ezVbhDnN84Pxqo8pUS2ix9kjwc=
Subject key identifier: 12:4C:46:57:0B:4B:F3:08:6C:FC:78:18:2A:E1:67:D6:B5:77:EF:B0
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 0198D4A81FB52F724896A9947AA9E8585FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 117D
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: wAcoJ7pX2BJTreugRqppKE4a5gynw/XK9UpfOxKlKhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:b5:2f:72:48:96:a9:94:7a:a9:e8:58:5f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=124c46570b4bf3086cfc78182ae167d6b577efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:67:26:56:f3:17:b8:b8:9d:cc:0b:db:c2:
fb:fc:b2:84:39:0f:7f:cd:d1:4b:33:46:ac:8d:6a:
50:86:6f:68:2a:6e:7e:74:c4:df:df:88:45:ed:c1:
85:94:cd:60:22:09:0a:fe:7f:06:f1:c3:67:39:49:
af:67:f7:ad:0f:f6:10:4a:f6:32:ed:cc:be:da:d4:
29:c0:fc:11:1f:af:9b:be:9c:ce:05:a5:8b:2d:42:
36:11:64:4a:13:09:17:31:d9:f9:52:16:1a:f9:46:
01:a9:81:c5:ad:70:4d:66:1f:5b:5b:67:11:eb:be:
e1:6b:3d:e7:06:aa:1a:a1:70:d5:25:20:d6:4c:d1:
8b:ce:be:ec:e7:de:31:bd:0b:a0:38:d6:ce:e4:b2:
ec:32:fd:1b:c8:ea:9e:d8:e7:b1:1a:cf:d8:67:d3:
47:e3:5e:b7:3f:d2:d6:3f:6b:24:55:47:2d:97:f6:
d3:32:93:0c:ef:1a:fc:79:73:f1:4e:6b:eb:31:46:
22:e4:ff:22:ef:44:12:ef:70:2c:a5:5f:23:04:89:
ed:d1:8d:80:e8:69:6a:22:cb:7b:f6:ab:ad:43:a3:
8f:6b:e1:82:39:18:fa:d9:92:29:4a:bd:db:9a:ef:
0a:2a:4c:4a:22:91:ad:cd:55:f6:ce:c0:a9:91:10:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:46:57:0B:4B:F3:08:6C:FC:78:18:2A:E1:67:D6:B5:77:EF:B0
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:f2:03:eb:ec:76:9f:1d:4d:b0:4a:69:74:89:9d:f0:bf:
50:28:5a:73:f4:22:8b:86:a2:df:49:32:97:1e:76:56:50:96:
28:ab:47:14:8d:45:b0:ed:c8:67:5e:1d:90:be:5d:56:86:ab:
cd:b6:2f:fa:83:73:8a:25:e8:c4:93:ec:d4:8f:e4:e3:f1:53:
28:37:e5:1c:cb:60:7f:a0:38:a3:c3:f1:ba:bf:7b:7e:b6:5f:
20:ef:38:a8:c6:96:e1:77:2a:9e:04:b9:9e:40:96:22:78:24:
ef:09:8a:95:6d:6a:cb:82:9c:d6:c1:b0:4d:5d:de:b0:ee:c3:
e5:8f:23:96:a5:fe:ed:b1:57:92:bf:8e:b8:bf:36:9c:67:c7:
af:93:14:56:e2:d2:ff:d0:04:e8:37:f3:fd:19:3c:58:90:05:
6d:0d:ee:2f:04:d9:61:41:fc:64:b9:0b:c7:16:3e:78:e7:05:
30:23:74:4f:4a:4b:3b:15:a3:86:ba:10:f5:bc:2a:cf:2f:5c:
0b:17:a2:9a:d5:32:93:97:f3:09:2f:68:0d:05:34:81:9e:ea:
df:7d:2e:0c:e3:eb:8b:c1:13:1b:f8:33:77:b2:87:08:39:21:
f4:02:5b:1c:3b:93:f0:f7:46:e8:1c:d0:9c:13:c3:42:0d:13:
36:e6:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:54 2025 by rpki-client