Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: hCkpCM1j5RB+8vIAeMKhSd95oPXRnZT78fLkIB5J+2c=
Subject key identifier: 0C:B9:3A:CE:F2:25:70:DB:B9:E4:13:F0:9C:10:65:0C:4D:66:BB:07
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 0198D5F143947656B4EE7D968A72D7038A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 01A8
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: CL979fK7lV6BUHBN+bNiMNVWxlATYO9hOhb7qYR9hjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:43:94:76:56:b4:ee:7d:96:8a:72:d7:03:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=0cb93acef22570dbb9e413f09c10650c4d66bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:49:d1:f8:d1:1a:6e:bc:75:aa:2c:49:95:
b7:07:f7:89:c1:ff:65:d3:d0:86:72:80:27:6d:f9:
a0:46:53:a1:62:01:b1:b3:dd:42:b3:4e:a4:45:14:
d9:9b:48:43:d1:58:10:36:85:fa:11:26:f4:7d:ee:
0e:25:56:27:1c:9d:ac:24:25:eb:26:9b:5b:b7:b1:
e2:bb:ad:03:f1:df:16:a4:48:f1:33:c0:ad:fd:f5:
92:53:27:98:74:af:8e:83:ba:cb:d6:2f:65:66:ab:
b8:80:40:75:37:a8:db:56:db:97:f1:d7:52:a2:47:
47:69:1c:a1:9d:aa:e6:93:98:8e:8d:9b:67:af:8e:
be:04:5c:8e:6a:5f:60:09:ee:11:52:48:cc:d4:2a:
24:aa:c2:4d:1e:28:84:88:f8:5a:73:e9:a8:6f:d2:
be:2d:26:5a:c9:6a:54:be:40:be:06:cd:75:2d:67:
f7:42:9a:ef:d9:d6:2f:20:7f:a8:5a:36:b3:54:f3:
91:3a:ee:f6:72:62:2c:39:ec:58:7d:31:06:d6:ed:
8c:58:00:74:7c:e5:4c:f5:6a:34:31:32:15:74:40:
3e:cc:d0:02:c0:ae:e4:3f:39:ab:69:2b:ce:e7:51:
79:de:54:02:2b:d1:42:ef:5f:70:36:32:5a:0b:54:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:3A:CE:F2:25:70:DB:B9:E4:13:F0:9C:10:65:0C:4D:66:BB:07
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:7f:a8:bf:35:9d:b9:c4:b6:b8:db:11:06:3a:9a:8c:b5:
7f:6a:a6:c7:2a:53:bb:fa:5c:6b:42:a1:42:87:0c:f0:5f:48:
d4:8f:6e:21:17:b7:18:3b:86:5a:74:01:02:84:fc:81:51:9b:
cf:aa:44:85:b3:16:d5:03:4a:cd:cb:c2:d8:82:41:35:ff:82:
14:56:14:a4:a5:98:2a:42:bd:b7:66:43:6a:81:c6:fe:10:90:
59:af:20:c4:f2:aa:80:63:39:80:c1:3f:d1:e1:59:69:37:d3:
2e:2d:34:0a:fb:89:54:3a:bf:d9:9e:8b:44:cd:22:b1:4b:fb:
10:df:4d:7a:06:02:58:de:74:1a:7b:0b:26:5e:8d:4d:e6:2f:
ad:13:7a:1f:6e:13:5f:46:0e:f4:2e:0c:7a:27:37:b3:8e:e5:
26:62:56:ea:48:ec:7c:a6:92:07:24:70:ea:dd:8e:92:19:81:
ca:07:18:56:b6:be:ff:f9:85:0a:1b:32:79:bd:c7:d4:16:d9:
26:24:7b:b9:f3:00:52:4e:20:be:7a:d7:bf:c1:e5:a5:63:8d:
97:62:22:f6:d9:4e:f5:fb:be:b0:dc:d8:0b:f3:8e:8b:9a:0f:
e2:da:87:37:b0:f3:de:75:2c:cd:2a:ef:05:56:d3:e6:10:4f:
10:2f:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:41 2025 by rpki-client