Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier: dikwsakSphAJrXl0bhoD71FeBK31TTDqJOGbRazVoIA=
Subject key identifier: 86:41:A0:FA:47:24:59:CC:16:20:F9:C4:3F:B5:B4:A0:1D:96:6E:AA
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 0198D5F1D9B232A0F51EE1EFCC92F6F66DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: WCg82azNrDGCgV1gNCR9cTqnBCTAVOsAVZh5w8mJvug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d9:b2:32:a0:f5:1e:e1:ef:cc:92:f6:f6:6d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=8641a0fa472459cc1620f9c43fb5b4a01d966eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:e3:f0:64:1c:c1:61:81:38:b9:c6:2e:ad:
dd:c9:0f:96:2d:31:68:c8:b5:8c:7e:86:6c:38:33:
99:58:3b:ce:21:a1:40:ca:37:ff:6e:3f:92:c5:7b:
bb:cf:a0:96:22:8f:5d:b4:e4:93:93:dd:ec:08:e2:
8e:57:cb:24:00:45:7c:64:b7:ba:54:06:da:62:c8:
95:01:35:32:13:02:2f:3d:09:3e:5a:4b:5d:12:37:
a5:db:7c:fe:b0:29:15:35:72:dd:fc:9a:f0:09:f8:
d7:a9:ba:27:c0:b0:f3:e6:de:c0:a3:58:f4:80:63:
3f:78:69:ab:2e:03:5c:16:b7:7d:a4:d2:f6:77:f6:
92:fd:a2:39:fa:0b:64:8b:f7:c5:af:18:ad:1e:c9:
89:4e:ff:ee:f1:c3:ec:c8:e5:fe:9e:a4:49:2b:44:
d4:08:1e:60:c9:1b:9a:86:2e:e1:94:63:59:d8:ae:
70:34:a2:aa:52:30:7a:e1:8a:69:f7:ca:61:8d:5a:
df:b4:2c:3c:29:26:de:59:21:5f:29:67:40:5b:3f:
5a:6d:61:c4:b1:bf:4c:15:71:ac:09:11:bc:90:31:
d8:fb:20:77:ef:76:ba:d9:13:cd:6e:39:17:b1:40:
ad:3b:f6:0f:dc:fb:4d:0f:a4:38:e9:72:45:68:64:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:A0:FA:47:24:59:CC:16:20:F9:C4:3F:B5:B4:A0:1D:96:6E:AA
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2a:12:e5:30:bd:1d:78:31:b8:d2:b7:86:c3:cd:9e:26:22:
37:51:86:55:90:a1:6e:b2:06:f9:9f:10:34:18:d6:c8:48:31:
2f:90:27:ba:a9:7f:cf:39:fe:f5:d4:3e:19:8e:be:3d:fb:9a:
94:6a:c6:56:69:5f:4e:1c:ad:3b:a9:be:2f:2b:4c:60:b2:df:
6d:05:f4:71:30:bf:73:52:90:85:cc:78:95:d7:c1:93:0d:b6:
47:60:91:05:ab:4f:c6:57:1f:2b:d8:17:40:d9:cc:e5:eb:54:
f7:e8:64:84:f3:cf:bb:8d:fa:45:87:04:46:67:b5:5c:3e:ab:
d5:44:35:b9:b5:37:24:48:85:f1:a8:df:d6:b7:1d:5c:a8:06:
07:36:4b:4b:25:ac:cf:eb:49:cc:79:03:d5:b7:12:c3:11:d7:
97:76:bb:4d:87:0d:b8:00:3c:d4:f0:3b:3d:ef:e2:40:60:6b:
ab:76:01:36:7f:28:97:39:57:92:04:97:bd:ff:5b:0e:04:5e:
a2:1d:6c:53:44:79:64:f1:77:d4:de:2d:70:1a:15:53:f7:a7:
c0:5e:09:4a:ae:7c:26:2c:5f:f1:ca:04:a3:6d:d1:2a:b8:5b:
61:61:10:c5:f8:21:12:fc:1c:f6:32:b6:8e:a0:1a:f5:7f:88:
87:4c:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:58 2025 by rpki-client