Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: REMNYCLKqdngSRuQTxcpjqJPzqBE/wqJkzHQdmGh7B8=
Subject key identifier: D0:8E:E5:16:25:62:39:67:17:27:AD:9D:E1:2E:39:E2:53:2F:D4:E5
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 0198D73B7183586668C9C5284E76D6D0F28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 0942
Signing time: Sat 23 Aug 2025 14:00:53 +0000
Manifest this update: Sat 23 Aug 2025 14:00:53 +0000
Manifest next update: Sun 24 Aug 2025 14:00:53 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: dRLKGtY313zyhvUNO1BCW2o1NdBAd6Fr7aGQCAGFAEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:71:83:58:66:68:c9:c5:28:4e:76:d6:d0:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Aug 23 14:00:53 2025 GMT
Not After : Aug 24 14:00:53 2025 GMT
Subject: CN=d08ee516256239671727ad9de12e39e2532fd4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:56:17:f4:1c:08:b9:c2:9c:8b:a9:5b:2d:
0b:a9:f8:f2:9a:eb:32:89:d1:50:0e:9f:f7:d0:71:
b7:8a:3f:1d:c6:9d:8d:95:a0:0c:15:44:b1:18:87:
c7:ee:a9:fa:1f:b7:95:89:6f:c2:46:ce:d5:7c:bd:
1d:12:fd:ee:82:73:da:1b:ed:22:14:7e:d8:e5:17:
8a:c0:2b:17:1f:10:39:62:21:ef:99:8d:83:74:9c:
2c:32:18:91:6c:cd:ea:34:32:50:16:97:5c:7e:12:
10:4b:10:21:6d:2f:f8:2b:8c:0d:1e:a5:cb:21:c3:
15:fa:ff:b6:61:5d:ff:39:16:75:4d:4a:a5:4e:93:
ca:41:94:8a:c8:6d:67:25:e1:8b:1d:c3:aa:88:42:
2d:79:92:d3:d6:04:4e:66:89:6f:8d:59:22:82:11:
d2:48:94:37:8f:21:af:4f:f6:c1:88:9b:47:41:9e:
eb:12:ee:b1:bf:48:81:41:2f:ed:82:96:09:4b:4b:
81:d5:43:81:82:7b:b1:5b:bc:f6:1c:52:72:38:b1:
57:35:7b:02:5c:ec:29:14:b4:68:cd:21:70:fb:46:
78:b3:c2:16:37:72:db:ef:91:f2:28:05:6c:84:23:
0c:db:0f:1f:7c:0a:c6:b0:f4:b4:ae:f8:28:bc:11:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8E:E5:16:25:62:39:67:17:27:AD:9D:E1:2E:39:E2:53:2F:D4:E5
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ac:99:2a:e3:39:14:5a:a0:05:76:14:72:f0:13:be:2d:7d:
7c:01:45:2b:f6:e8:b5:50:6a:e4:ed:37:aa:30:b8:01:39:dd:
a9:91:27:95:bd:a9:4f:6e:b3:b0:6e:47:ee:d3:23:76:ac:b6:
30:ee:6e:3c:8b:83:f6:3b:6f:a9:ac:2b:c3:5b:9d:6e:6a:76:
55:93:a4:64:a2:d7:c8:84:f6:1b:11:87:2d:d7:3f:dc:c5:78:
51:36:93:fa:19:2c:a2:1b:09:59:4b:e9:08:96:86:83:a0:80:
d8:b3:04:d5:01:a0:0d:ce:ab:5b:c8:96:47:2c:62:2a:51:1b:
26:35:1a:2c:b0:96:74:75:bc:82:a8:7e:73:25:25:8e:08:50:
55:0f:d2:e4:e0:5a:44:4f:ad:a3:ec:7d:39:5e:69:32:5a:08:
24:7d:50:1e:a7:18:02:00:a0:56:a3:88:31:c5:26:15:72:a5:
c4:e6:f9:81:79:4b:71:03:af:04:bf:cb:20:d7:5c:23:5f:ee:
c0:a8:29:04:75:43:98:98:36:e4:62:44:c2:01:34:6c:a4:bf:
32:15:a7:b0:02:de:5f:48:08:46:7d:ba:7a:d0:ca:56:35:d8:
70:be:bc:a7:d3:af:0a:65:b0:82:2d:bb:0b:51:37:61:11:e4:
78:e6:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:33 2025 by rpki-client