Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: iEUfilqJAHHZAUucndggf2G8qot8Oepn1h1vWUxVEWA=
Subject key identifier: D9:FB:C0:EE:07:00:86:B8:13:CD:7E:98:9D:09:58:12:91:95:C9:74
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 0198D697EDE7411F9E4F8330981CC162C206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: PwNxK7Pd7ao4/1Pi913Ty0FD7ng1ypSRE++uyW2DYek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ed:e7:41:1f:9e:4f:83:30:98:1c:c1:62:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=d9fbc0ee070086b813cd7e989d0958129195c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:aa:a6:49:f8:24:42:ca:6d:26:fc:e4:00:
7f:19:4e:10:bd:d7:6a:66:14:9a:2f:1d:0a:c9:46:
18:49:cd:d1:f3:11:48:b6:42:bd:e5:18:cf:4c:0d:
67:15:86:db:91:72:43:74:9d:c3:cf:46:11:5e:89:
07:c8:e1:c6:b3:20:af:87:56:66:bb:01:86:84:b6:
7f:97:9f:6c:25:ce:b6:d1:db:76:4e:33:0d:07:52:
9b:cd:ee:14:85:9d:cd:ce:14:42:62:33:57:d1:5c:
e1:52:c7:6d:1e:3d:48:ee:64:28:c8:87:f4:80:ea:
c3:8c:f1:09:97:78:53:b5:32:a0:61:3d:d3:e5:f7:
25:7e:85:4c:87:64:ba:ee:00:60:67:29:bf:5a:b1:
89:05:be:26:35:1b:a7:e9:bd:5b:61:05:c4:b5:c2:
ab:e7:23:8c:e1:37:e9:63:53:33:2a:aa:80:65:d4:
30:13:a5:9a:79:bf:fc:e1:24:68:d1:12:54:05:ac:
3c:3f:47:47:e5:72:da:60:6c:c6:bb:fb:3d:67:55:
d4:36:24:39:05:35:49:00:6e:2c:07:7b:7b:3a:83:
71:f3:72:09:65:d8:bc:30:07:7e:d1:81:15:5c:81:
7c:ac:27:ac:21:86:de:89:92:45:83:9d:88:77:c9:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FB:C0:EE:07:00:86:B8:13:CD:7E:98:9D:09:58:12:91:95:C9:74
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:52:34:2e:a1:62:c8:17:2c:ee:ae:1a:43:cc:e1:4e:f6:56:
58:db:05:9a:9c:56:33:38:b6:26:5e:26:54:67:14:79:55:4b:
c4:90:36:73:9f:0b:27:4e:5a:78:50:44:07:4e:7a:d1:d6:25:
a9:89:fc:72:59:dd:6d:92:b9:85:52:db:2d:23:c9:f4:56:9e:
ed:dc:a8:d9:a8:8d:09:67:17:a9:8f:bb:c2:df:4f:b5:83:fb:
3b:cc:ed:ec:27:f9:05:bd:83:88:07:45:40:02:79:de:19:a9:
fc:77:4b:7a:49:b6:06:a4:74:b8:0c:a7:6a:2f:03:a7:dc:81:
c0:8a:26:e9:a0:31:e1:2c:34:7c:b6:ba:1c:42:69:e4:a2:fb:
72:f7:b1:05:7e:e4:91:5b:6c:45:48:ba:be:65:4c:35:92:e0:
ee:b2:d5:aa:a2:8a:5b:78:56:9b:46:09:6b:83:29:26:02:7d:
3a:0d:d0:fc:e5:88:bd:d2:b6:e9:c6:dc:6f:ad:45:fc:3c:a1:
53:43:b5:55:5b:c6:b7:2c:18:fc:e9:2d:07:17:4d:57:9d:79:
15:ca:55:3f:ec:c7:8c:21:3f:2a:83:bf:32:d8:10:f8:d7:3b:
34:1a:39:cc:d6:ed:e7:9f:9b:da:9b:39:c4:72:f0:50:d8:e7:
c9:3c:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:33 2025 by rpki-client