Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: kssVbpu9sEnBA8qkkBj+meCCNLS2JwJlgWXa3uQnLgI=
Subject key identifier: 59:5F:44:31:1E:77:FD:B4:8B:4C:17:09:29:C2:14:3E:4B:BC:A4:5E
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 0198D70611E9C241CC1F19224D430BF53EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:35 +0000
Manifest this update: Sat 23 Aug 2025 13:02:35 +0000
Manifest next update: Sun 24 Aug 2025 13:02:35 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: JlLcU6RBsertuiMADexzVZRpKPESZwZhhcsAG/emwbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:11:e9:c2:41:cc:1f:19:22:4d:43:0b:f5:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Aug 23 13:02:35 2025 GMT
Not After : Aug 24 13:02:35 2025 GMT
Subject: CN=595f44311e77fdb48b4c170929c2143e4bbca45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:b3:d1:cc:40:1b:b4:3b:a0:1d:05:83:1f:
98:40:f0:d0:ed:be:e8:94:8a:24:c9:de:b6:e7:55:
b0:d0:b7:26:a4:46:ac:0c:bb:a3:d2:f7:a4:9e:fc:
ad:34:20:9c:d4:b0:44:b2:03:24:4e:5d:8f:ac:69:
0c:f1:20:c1:bc:74:2b:53:bd:c7:57:7b:b7:56:8b:
ac:d9:5f:ae:3d:d7:8a:77:01:a0:c7:52:7e:4a:08:
1f:ef:d9:83:ab:95:83:c2:89:c9:81:d8:3d:c5:f5:
6e:d8:e6:9f:e1:a1:80:f9:6d:aa:5c:25:bc:88:cc:
b9:37:94:47:3e:cf:70:d4:3b:b4:58:43:50:8d:fb:
50:39:bd:59:7e:9a:4b:02:57:16:bb:55:84:6c:cd:
58:90:f1:6e:27:14:43:4d:8e:7d:c8:16:95:0d:40:
05:43:86:03:ec:d7:aa:91:5a:60:26:75:ad:c6:3d:
24:74:eb:86:7f:db:c1:68:4b:2b:e1:ba:b3:17:4a:
6f:52:8c:ea:db:ce:14:a6:da:a5:59:45:73:16:00:
50:56:77:e0:20:cc:c4:72:b4:3b:ba:d3:1b:d6:e7:
e4:2f:11:b4:44:5b:be:d5:ac:5a:e8:f3:75:b1:3e:
1c:45:ce:6f:10:9f:f2:f4:66:19:37:21:9b:ad:26:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5F:44:31:1E:77:FD:B4:8B:4C:17:09:29:C2:14:3E:4B:BC:A4:5E
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:87:8f:18:17:64:d0:8c:db:2f:2d:19:3c:75:b0:96:59:
73:a5:d1:45:ca:5f:31:c1:ed:4b:78:59:04:57:db:8e:79:95:
cc:f6:98:48:09:15:da:72:ba:00:94:5c:23:66:be:c2:0a:7a:
32:a6:c9:79:8b:f2:ac:c0:0d:a5:88:01:26:04:e5:da:12:f2:
dc:5b:27:3c:25:88:9f:90:1b:21:14:e6:40:b9:fe:51:82:13:
d0:d9:eb:25:e6:37:8f:89:01:49:c3:aa:7e:fd:90:f6:f3:d0:
11:e6:fc:44:87:ac:c7:7a:0a:91:90:37:f2:de:17:2c:2a:bc:
41:16:0f:fa:92:5f:a9:1c:5d:51:a2:0b:cc:1b:31:ea:1f:9a:
b7:4a:cd:79:eb:49:fd:45:dc:1c:0c:3b:06:35:aa:6d:a6:b7:
56:0c:4d:e1:2d:27:2a:e8:4c:5c:5d:8a:30:2d:eb:48:8d:c2:
ab:32:25:93:7e:29:aa:ce:37:14:74:19:87:02:06:0f:82:df:
4a:a7:ca:43:f0:43:40:9a:f8:56:f8:c7:c8:07:f8:e9:3e:05:
5d:d6:00:88:40:fd:09:79:e2:f0:d9:bd:bf:40:52:14:d8:94:
27:92:4a:b2:a4:ef:89:6e:51:65:ab:80:12:45:2a:87:13:d7:
15:33:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:55 2025 by rpki-client