Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: naDg+rD1z6XCv0fL188TbyfxglRY5hnIymk2QJxvSf4=
Subject key identifier: ED:F3:9C:10:A1:A2:FE:75:08:53:DC:AD:50:4E:16:29:E6:98:52:0C
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0197B6A201E0826A71D9721B382E1FD034F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 090D
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: bpZLSEGYHVoozmnN4oC7q8mCGZzKy6PoOlPWPunXFas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:01:e0:82:6a:71:d9:72:1b:38:2e:1f:d0:34:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=edf39c10a1a2fe750853dcad504e1629e698520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:25:41:d8:20:28:e0:d6:4f:63:20:66:c7:
dd:5d:d6:81:e1:65:85:fe:3f:1c:90:98:03:27:1d:
94:47:12:ef:62:96:cd:79:f9:50:df:1d:09:e3:d8:
ca:22:04:55:97:17:5b:0d:c9:f2:29:d0:67:72:9f:
70:f8:a5:ee:62:4e:50:ba:37:61:b6:d7:f9:5c:a8:
a4:49:a3:87:2f:26:55:48:c4:c9:5b:27:94:88:4f:
b7:c6:e4:d7:c6:5d:23:1c:a1:50:ca:40:90:46:e0:
94:b7:ac:3a:30:11:08:19:a4:d5:f2:8e:89:7f:4a:
79:79:3d:90:ea:b8:49:b4:10:20:66:f8:8f:3f:4f:
88:2c:fd:fd:f9:89:1e:c5:f9:11:ee:66:34:4b:c2:
c2:07:07:2f:7b:89:84:6c:25:f1:1c:eb:97:0c:ab:
c3:b3:8a:9e:e1:a5:26:6f:37:35:a3:d5:2b:ba:34:
bc:0c:43:e9:86:d8:82:9d:9b:5e:6c:65:c8:fc:4b:
cd:4b:ae:5f:38:18:64:3b:c7:96:df:2d:5f:97:78:
82:16:b3:46:eb:db:ad:c7:40:e4:4f:2f:fb:53:7a:
ac:61:d5:d3:4d:70:c9:6e:43:e0:0e:22:ea:fd:5c:
37:da:a5:40:94:b9:ab:9d:48:15:07:b6:ef:4a:61:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:9C:10:A1:A2:FE:75:08:53:DC:AD:50:4E:16:29:E6:98:52:0C
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:0e:61:8f:60:b4:fa:f9:1c:a1:e8:dd:24:b3:b7:42:09:
66:2a:21:c3:b1:47:c1:da:a9:95:35:37:8a:8a:11:f8:95:e2:
56:26:6e:61:b1:d4:b9:4e:68:da:03:61:f2:e2:8c:a6:88:d9:
1e:48:e8:55:ce:40:dd:84:04:a4:fd:90:b1:6d:a9:39:ba:3c:
0f:a7:4b:e3:45:f6:72:62:5c:84:b4:cc:1a:29:9a:ca:85:f8:
32:15:88:3e:2f:b7:41:48:76:bf:9e:65:bb:b7:0a:c4:3f:27:
89:01:78:33:47:6c:fd:ec:ac:06:5c:1e:11:05:60:75:f6:9d:
0d:6e:16:0f:60:b9:d2:c3:a3:91:46:60:22:87:8e:66:15:aa:
55:d6:06:77:db:00:80:69:c9:bb:3c:db:52:bc:a6:2b:0c:e5:
0d:e3:ff:4c:6c:03:5a:06:ba:ea:e2:5b:66:49:fe:86:e8:e7:
e8:cc:02:98:d6:7d:2d:6c:2d:5a:71:89:a0:fd:5b:e3:e1:80:
2c:9c:5a:c7:8f:0d:a1:39:1c:23:c3:15:e9:c2:54:a8:bc:03:
aa:e1:58:63:cb:0f:c7:9a:95:23:06:89:4f:d6:e9:48:39:6c:
dc:59:0d:89:67:86:f7:e6:e7:ff:27:4b:3b:74:01:d8:01:94:
86:98:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:39 2025 by rpki-client