Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: Ez9PK06skdv7MgaPvZfM7LCD4qEOarOn5T/hBVbb8s0=
Subject key identifier: 2C:76:99:9F:A1:E7:52:5D:D8:76:8D:DF:EB:CB:9D:06:67:30:2D:1D
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0198D65FB738F5939F362261F46E2CEF0789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 09A2
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: 6vwPu83T6izzDNEpFZzVM054YZSFl7uybhz38wzKt7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b7:38:f5:93:9f:36:22:61:f4:6e:2c:ef:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=2c76999fa1e7525dd8768ddfebcb9d0667302d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:75:8e:60:a1:16:02:c2:c8:18:2a:6c:f5:
a9:2c:77:18:82:7e:f7:68:5f:53:9f:a0:2b:d5:57:
1e:c6:8e:f6:11:e0:e1:62:99:b1:60:79:6d:64:20:
e1:57:41:9b:f3:6d:e9:16:88:59:ef:a2:15:4a:f1:
14:ac:22:64:64:ce:8a:32:cc:49:90:1a:4c:c0:6d:
6c:36:52:2a:48:c0:05:44:37:b2:3e:f0:df:8f:fb:
c5:56:31:24:58:35:4f:fe:42:a3:9d:e3:fc:9c:29:
a7:41:46:7d:7f:a8:eb:92:0a:ac:63:a0:8a:a3:9c:
41:41:7e:9e:71:d6:18:ac:97:b2:19:c5:c3:91:48:
a2:32:13:b4:35:d9:c1:5d:6f:44:54:54:ff:8e:2a:
5c:70:80:06:af:24:de:cc:bc:31:1c:79:a9:4c:44:
0a:1c:d0:5f:aa:f4:f3:67:38:63:13:78:21:b5:d1:
7e:2e:fa:bf:76:d8:82:2c:89:67:ec:a3:6b:86:f5:
1a:66:72:fc:35:26:80:26:69:28:e0:b3:fb:1d:f4:
17:a0:66:57:86:b1:e4:f5:80:86:47:93:65:d7:00:
99:63:76:a7:30:27:20:c2:c5:98:8a:d2:b5:e1:14:
25:08:fc:53:97:c7:3d:21:2d:95:b7:48:21:20:b4:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:99:9F:A1:E7:52:5D:D8:76:8D:DF:EB:CB:9D:06:67:30:2D:1D
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:ab:b9:fb:04:b2:43:bd:85:6b:f5:4e:ac:bd:0c:7d:21:
6c:19:a2:b0:56:d5:26:39:95:7e:1b:85:20:63:4a:69:33:62:
64:65:67:f9:7d:15:c5:d3:d7:cc:68:d5:7e:f2:4d:e5:ae:eb:
c6:fe:a8:e1:66:e6:f2:92:cd:70:94:91:6e:78:88:2e:cc:4a:
c2:a7:89:1d:67:53:d3:e3:ea:d4:09:01:9f:27:d2:42:35:58:
7f:6f:ed:da:8d:82:43:65:28:24:a7:ea:1a:06:8f:d9:48:64:
bb:6e:be:b0:4e:cf:b8:bd:14:db:ba:66:6d:ed:55:e5:aa:c2:
92:63:f0:04:ef:03:a8:c7:48:ae:89:00:3c:d2:56:35:f5:0c:
61:e5:27:b6:cb:77:1b:ac:3b:1a:b1:ff:d6:d4:ab:b6:09:2a:
ee:74:78:1b:e4:dd:43:a8:ef:8d:17:30:b8:45:85:0d:ab:da:
7a:0f:c5:2f:bb:d7:50:be:da:91:9c:8d:e3:92:84:bb:35:25:
11:b2:1a:0e:be:92:84:83:e9:11:96:5c:c8:d7:1f:d1:92:b4:
ff:d4:ac:e4:3a:34:1e:10:76:dd:9d:ca:af:63:ff:36:d2:fd:
82:5c:e3:87:81:76:f1:21:4a:ad:4a:f4:ff:a3:2b:36:f0:5b:
dc:31:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:01 2025 by rpki-client