Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: NIOR6RLV+2yuesC74Go5n5yYjMX46W4abuhRre1EjhY=
Subject key identifier: EB:4F:AA:3E:68:F0:76:0E:5C:7F:A7:3F:77:9E:84:E9:E8:8E:CF:20
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0199FBEB02B2555B8FAEC50A696CEB10D69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 0A3A
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: TVuLU2wvFNwX7JR/cclDJRI87QQ45w6QtLU9tp37gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:02:b2:55:5b:8f:ae:c5:0a:69:6c:eb:10:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=eb4faa3e68f0760e5c7fa73f779e84e9e88ecf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:20:8e:48:09:c6:81:ca:14:e4:2f:69:4f:
cb:cc:d1:51:4c:20:16:4c:dc:53:95:35:28:8b:55:
3c:42:fb:a2:ed:f9:d1:59:61:d3:b5:e2:c8:21:85:
bf:14:aa:ee:5d:13:fc:4b:ca:b9:42:53:b9:d6:18:
08:cf:ef:a1:56:b9:63:19:11:20:35:f6:65:8d:09:
ea:81:d4:d7:60:93:7e:8d:a1:e2:c8:0d:76:45:12:
df:c9:5f:6b:b4:a7:5f:7f:5f:17:7f:5f:95:e9:14:
84:b6:fd:26:96:47:33:01:db:5e:d6:40:b3:b0:b1:
ee:fc:82:09:a5:fc:0b:c9:e0:c2:82:29:ce:ea:bb:
d9:7b:47:59:cd:73:f8:64:80:e8:48:0d:49:d6:67:
de:ed:01:7e:b5:f3:8d:cc:6a:63:b4:46:87:00:38:
44:75:09:9c:d6:a9:e3:c0:d7:19:27:c0:6c:c8:ec:
1f:cf:4b:7d:95:80:03:48:d2:24:61:dc:45:81:66:
11:2d:47:e8:d6:26:47:e6:06:b6:9e:62:93:44:ee:
dd:26:d5:c8:5d:9f:a8:ef:ff:3d:6f:0e:49:fc:90:
4b:8b:82:9e:26:66:f7:fc:c7:bc:f9:86:fd:f3:00:
06:07:ea:16:f3:cc:36:a8:f2:62:8f:4e:f0:e7:f0:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:AA:3E:68:F0:76:0E:5C:7F:A7:3F:77:9E:84:E9:E8:8E:CF:20
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:99:cb:e7:c6:aa:06:44:1c:5b:e1:9f:e7:09:56:c6:47:5e:
6c:7b:2c:cf:16:ef:d5:3c:1b:79:a5:13:83:e2:1a:8f:85:8c:
be:d4:f3:2b:ca:8e:31:68:8d:df:9f:34:2a:f1:5b:7c:0c:d3:
e6:24:32:63:1f:7a:6c:41:d0:bf:7c:f2:61:28:d5:ea:a3:e2:
98:fd:89:94:71:95:6d:30:04:98:fe:6a:9e:e8:18:4b:30:ac:
21:3e:12:35:a7:37:4a:bb:cf:5d:d1:cf:45:ac:f6:f4:4f:55:
b4:23:7a:d7:f8:b2:27:cf:29:c2:33:04:da:55:64:c2:b3:c5:
29:ec:68:36:67:6b:d8:c6:fd:28:82:62:e0:56:fb:3a:a5:0d:
43:c6:ac:17:b6:c5:d0:ea:72:db:04:93:7f:20:f3:6b:8f:4f:
50:59:b3:ae:81:04:ae:c7:21:24:3d:24:ee:9a:c3:93:10:02:
94:6c:fb:e7:42:58:ca:3e:6b:6f:2d:ef:32:67:12:24:36:56:
08:2f:a9:67:c7:5e:9c:76:34:f0:45:95:a9:96:d9:25:64:82:
d2:0e:34:47:24:1b:23:a4:b2:38:0c:0f:e2:58:6e:91:e7:1b:
5f:69:c2:0a:02:64:43:c3:42:4e:81:5a:da:e2:6e:5c:5d:ec:
57:4c:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:08 2025 by rpki-client