Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: +vOzWCObHBbTfed4M3BydwO5ef6EOXjakYBdXzeMIsA=
Subject key identifier: A7:6C:74:CF:C0:75:4E:F3:05:5F:87:B7:A6:DA:07:FE:4E:65:69:8E
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0198D7058606BBE6B52A800719CF544370D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 0287
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: 5roySG+fjJY4HBr7xPl+wAPAeEC7mgldJ3qwZWjZkh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:86:06:bb:e6:b5:2a:80:07:19:cf:54:43:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=a76c74cfc0754ef3055f87b7a6da07fe4e65698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:d5:a9:d6:d3:67:99:9b:71:da:3f:b4:f7:
e6:11:56:e7:47:58:f3:97:10:c1:bf:3c:93:73:38:
96:36:02:32:5c:f7:62:9f:b5:c2:b5:43:0f:73:34:
0e:78:e3:bf:e9:ec:93:51:94:7b:02:70:2a:26:4f:
39:2c:98:0d:a5:a3:81:3c:ae:ca:60:69:4d:f7:1a:
36:3e:3e:8a:4d:3d:d6:8f:0a:9f:02:6d:c9:ff:e0:
66:1c:16:0d:6c:fb:3b:3d:0f:dc:f5:49:87:00:07:
4b:75:e4:12:78:24:a6:92:26:6c:1f:19:61:97:2f:
87:5f:1c:ac:d0:54:f1:23:1e:71:27:9f:90:27:87:
c9:83:43:20:03:34:e5:5a:89:07:29:68:6a:65:43:
ac:a8:0f:8d:be:4c:8d:1c:dd:65:8b:00:a9:67:a9:
21:3e:f8:95:2d:a1:bc:10:3d:65:f7:44:07:8d:40:
1d:e7:f8:1a:e9:76:43:d6:36:d8:c7:68:47:aa:db:
01:d2:1e:d2:6d:ba:e4:08:48:07:86:af:df:cb:47:
16:a4:27:d8:cf:44:84:6d:15:ec:cf:ac:10:95:a2:
7f:43:01:0a:5f:11:9d:b2:88:98:3b:f0:44:c2:e2:
bf:c5:93:60:57:a3:69:6b:29:95:c8:79:f2:3f:5a:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:74:CF:C0:75:4E:F3:05:5F:87:B7:A6:DA:07:FE:4E:65:69:8E
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:69:ca:91:2f:0f:c2:87:2b:c2:8e:08:01:12:14:d6:5f:
e6:1d:25:af:ee:86:80:7c:e4:c2:cb:fc:9a:f2:5d:e1:ed:c0:
84:a1:c3:52:ae:fd:f0:7b:e2:c9:2e:a2:ef:5b:2f:8d:2c:87:
6d:b3:9d:1f:5f:93:e6:96:f5:1b:ab:f8:be:fb:37:d7:ab:0e:
6a:e4:2f:ca:ee:69:31:ce:b1:46:86:02:99:2d:f3:58:5b:c9:
13:e9:19:f8:7f:e7:5c:39:95:18:ac:ec:77:e2:e0:fe:19:63:
4a:98:8a:92:1a:9b:84:0b:6a:25:24:c7:ff:98:23:8d:1f:1e:
8f:06:73:5f:17:ee:57:c6:e3:f1:09:d7:10:18:61:20:8a:50:
b6:ab:72:7f:ad:11:44:a8:90:5c:14:3e:f9:d7:6c:60:b6:5b:
a4:b7:93:a1:28:90:89:c0:a1:6a:fb:ce:10:d2:01:57:6b:c9:
d1:bf:90:46:18:4d:4b:d4:eb:48:0e:b6:1d:d1:b4:bc:6d:d1:
84:90:dc:4e:33:b6:80:1f:b2:39:0b:af:e2:ed:e1:6d:01:c0:
e6:cf:64:78:10:dc:05:f8:a0:a9:c5:38:14:49:c2:6e:13:94:
6f:03:d0:9f:22:c6:d7:e6:dc:c8:95:6e:37:21:8e:ca:a8:e3:
e2:f5:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:19 2025 by rpki-client