Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: 7WlD1WEEzll2HROahhegWKX4/i2+r8xmJqnd3l5ARm8=
Subject key identifier: 50:17:AC:82:B3:F9:CE:01:57:00:C0:E1:B5:A5:8D:BD:57:2D:2A:68
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0198D4737D85C062E2D7FD3AD789328759CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: pMdgRtaEFVyjQPpW0pRD4bXlB4n5Rz5A+KAms+o8lds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7d:85:c0:62:e2:d7:fd:3a:d7:89:32:87:59:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=5017ac82b3f9ce015700c0e1b5a58dbd572d2a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:ea:ed:6d:3c:8e:6f:98:c8:c0:e3:bd:07:
68:7e:78:41:46:67:f6:78:30:c4:5a:08:ea:34:fb:
d3:59:e5:f2:c4:ad:8b:18:f3:f5:0d:b7:2b:b4:03:
8c:d7:7b:a3:72:e1:50:85:63:21:ff:73:e0:e3:52:
ac:5e:a3:f9:a2:01:fe:4a:8d:be:64:8d:59:90:6f:
92:41:e2:d6:45:a6:d7:95:15:70:ca:53:dc:6d:29:
62:69:3e:89:d5:42:0c:6e:a9:4e:a5:d8:17:d8:96:
99:ae:8e:5d:96:88:9c:a4:de:54:0f:d9:11:4e:ca:
f5:a1:5a:87:8a:0b:68:b6:2e:7c:04:53:92:03:a4:
dd:4e:4f:86:99:1f:87:4c:cc:31:2f:62:30:c3:cd:
46:5a:13:78:5f:14:32:2c:4b:04:90:67:a0:22:8a:
d4:01:38:ed:e2:e2:4b:7a:4d:1b:fd:b8:a1:9e:ab:
c4:21:1a:0c:86:c1:bd:73:a1:7d:f8:66:97:f6:56:
a6:ff:eb:b0:04:df:a0:51:91:08:23:0b:11:3a:6d:
35:48:af:d1:12:ce:25:8f:1f:41:e1:76:7e:a6:b8:
49:b1:92:63:e0:77:a2:7b:76:1a:b4:bb:9c:27:99:
ce:33:4d:8d:72:1e:f3:a3:ab:f1:3b:6a:67:f3:a0:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:AC:82:B3:F9:CE:01:57:00:C0:E1:B5:A5:8D:BD:57:2D:2A:68
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:af:3d:67:7f:31:09:0c:47:fe:4c:dc:c8:3a:0a:42:80:
06:66:77:b6:00:82:e4:9a:7a:9d:51:3a:0b:ae:95:3a:23:49:
c6:e1:2c:f4:d9:91:61:ce:f3:81:27:9b:bb:85:aa:b8:74:80:
46:e1:f3:da:d9:01:f7:af:1a:f5:74:47:4d:c0:49:a8:a0:d2:
9c:1d:8b:d0:d8:6d:f1:8a:56:1a:45:50:7f:64:86:3e:58:53:
55:7a:a8:67:f3:7a:38:2f:b2:22:aa:e7:ea:2c:82:01:e7:8c:
ed:39:b5:6e:dc:70:53:c1:8c:a4:da:ea:3a:72:f8:04:e0:05:
7e:8f:07:f6:cb:ab:84:47:1e:e2:2a:21:bd:60:f9:d2:f6:7d:
a6:5d:df:e6:f5:15:64:30:42:25:ff:a2:32:00:b2:ca:30:7e:
69:c0:21:04:38:09:f5:de:a7:d0:b1:24:e8:e7:0f:e4:44:0b:
af:0d:19:1f:07:31:23:9d:bc:ff:f9:c3:80:d6:4d:87:de:20:
a5:a0:b5:4e:ce:7a:20:f3:68:2a:90:dc:48:cb:33:a4:64:32:
80:1d:99:c5:e5:dc:48:70:14:84:e9:72:6c:09:7c:87:d4:4f:
92:91:12:16:25:f9:15:e5:b9:9c:4c:ed:3b:17:a1:50:b2:75:
fe:ec:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:14 2025 by rpki-client