Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: jhOh++rlWndIgSF8Evk97xo857iB7A1p2+VBn88S/og=
Subject key identifier: 9A:C0:A5:91:AE:72:8B:2B:04:AA:E5:4B:78:84:66:2C:74:0E:5C:F4
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 0198D65FF21FECDCBA3A0A24F6B82D5FD504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 14B4
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: 6wPIz570sOYwNOMkqpyO4untVPCOabDU6Ve0SLkf59w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f2:1f:ec:dc:ba:3a:0a:24:f6:b8:2d:5f:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=9ac0a591ae728b2b04aae54b7884662c740e5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:f1:9e:0b:74:41:c5:28:a8:31:3e:20:e1:
29:13:52:2c:db:21:bd:6e:62:b8:30:5f:b0:6e:00:
e0:42:50:a9:0f:4d:43:d1:ab:e8:95:02:81:d9:89:
b1:ba:ff:ca:df:6a:2a:bf:cd:48:3d:67:d6:8f:c3:
33:97:ad:27:af:b1:22:5f:cf:93:23:59:4b:69:c2:
0d:53:06:e3:18:d9:78:05:56:72:8e:e1:2b:6a:a4:
8e:63:7b:a0:fa:e0:70:e6:cd:3a:d6:46:56:3e:86:
c7:b9:6d:f1:dd:cf:b6:ea:9d:36:91:ac:d5:43:64:
d7:36:1f:34:a9:10:0c:b6:2e:15:73:74:d8:75:46:
41:21:95:64:0d:85:37:e0:c4:79:d8:b2:f6:f9:7c:
f3:35:2c:04:63:10:b5:1e:ba:ec:76:39:e8:c2:fa:
d5:5b:d3:6e:02:93:99:c9:04:dc:83:70:cb:90:27:
e1:94:90:7b:e5:6a:88:c9:60:e6:33:2c:8c:14:ea:
7b:95:4d:88:cc:3b:f6:99:7a:42:e8:a5:7c:84:59:
9a:ee:23:33:22:3e:46:e4:f0:dc:ca:3e:59:40:5b:
89:2b:a8:75:66:7e:b7:8d:ea:bc:8c:2c:9b:b5:65:
58:d0:62:7a:b8:bb:ec:f0:9d:3e:e0:c9:c2:26:3e:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:A5:91:AE:72:8B:2B:04:AA:E5:4B:78:84:66:2C:74:0E:5C:F4
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e8:51:a9:7d:7d:74:89:ea:f1:0f:7e:42:34:2c:ff:28:cf:
d0:4d:f8:b7:14:ac:ae:a2:9f:16:7f:4e:05:46:9c:1e:fa:ed:
46:53:3f:e2:d1:ac:08:58:23:ac:0e:b4:65:8d:2a:a5:5a:80:
07:de:53:e9:c8:b6:49:50:c3:7e:5a:c6:62:ad:f6:47:5e:7c:
4e:0c:d7:e9:df:6b:3a:71:fe:22:ec:40:b3:cf:43:69:52:16:
73:24:12:79:1f:11:4e:d0:bf:30:de:b1:08:98:64:ac:7b:f7:
72:57:0e:0a:ac:dc:f0:bc:f0:8d:bb:94:df:0e:d0:a7:14:5b:
69:b2:6e:ff:ae:3e:40:c9:25:fb:33:b8:0e:3e:b2:81:5a:db:
ea:cd:1c:ca:73:65:0b:35:1b:94:99:71:a8:1c:49:79:4f:2d:
c2:70:97:5e:45:d9:73:f3:9e:09:51:5b:5c:55:be:88:d3:b0:
60:8c:73:e2:ae:1c:dc:e5:60:a7:b5:1f:2a:c8:55:59:d0:6e:
19:ab:b7:ed:69:a6:c4:6c:fb:cf:7f:0a:31:3c:0b:06:d6:9c:
74:ea:60:2b:dd:b5:d2:0d:c8:a0:9e:3b:d8:cc:4e:2a:70:9b:
0b:ce:f1:86:44:9a:56:7f:fd:dc:90:f7:ec:e9:7a:5e:3c:37:
77:ca:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:55 2025 by rpki-client