Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: gMyGcc+7t5rWA5pCAIdcpommwvGQksZov9zydtFbw6E=
Subject key identifier: 36:8A:77:59:F9:89:34:0B:9E:DB:0E:0A:3C:1F:A0:49:08:C8:DE:3D
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0198D6601E312BF84A36D8AA69E3BC5F78A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 08D5
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: 49E5YmnCxk/knBnRnOUNoLt+xx/BKEplRaaE/z3qj70=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1e:31:2b:f8:4a:36:d8:aa:69:e3:bc:5f:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=368a7759f989340b9edb0e0a3c1fa04908c8de3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:67:e3:0a:36:e7:c6:d6:10:ae:28:35:6e:
22:fc:97:96:e6:cb:ed:8b:f9:4d:45:f5:78:9c:ac:
d0:5a:dc:a5:8a:c9:c0:10:23:fa:a4:91:1e:76:43:
84:8e:e3:58:d9:9b:1e:b0:a7:e5:be:92:e1:46:3f:
d4:17:46:41:c9:67:45:ae:80:3b:7c:ba:2c:02:21:
bc:df:90:34:89:92:c8:10:f4:e9:af:c5:dd:42:08:
46:79:a0:14:8d:00:44:aa:48:a2:4d:d6:df:7f:1c:
12:6c:26:a8:f9:39:c4:6b:85:02:e5:82:a6:b7:f3:
44:8c:a1:eb:97:3c:24:c9:e7:ac:57:f3:7f:e6:4f:
49:41:d2:50:77:7a:8f:d8:0e:78:2b:2e:e5:45:1c:
a1:9a:fe:4a:3f:c2:90:9d:c8:96:79:2f:a4:45:cb:
da:1b:29:b6:cb:c2:84:5a:fc:6b:6e:87:b4:59:0b:
b1:91:85:ff:90:49:6b:fe:58:6e:88:3d:2d:ab:f7:
b7:f6:da:d8:03:42:a8:4b:e8:b2:34:0a:47:7b:29:
e4:7c:76:cf:ad:83:30:3d:d4:74:21:e3:76:16:33:
3b:95:e6:90:d8:d9:b8:d6:76:f6:03:ed:b7:fd:8f:
82:5c:3d:e2:1c:2c:69:8f:22:f6:f8:56:f6:90:df:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:77:59:F9:89:34:0B:9E:DB:0E:0A:3C:1F:A0:49:08:C8:DE:3D
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:15:02:0c:f7:74:97:86:fd:e7:76:24:ca:0b:d2:1d:4a:
79:86:2c:3e:e4:d0:83:42:9b:0d:2f:b6:27:95:b9:3f:fc:3c:
82:1d:29:01:bb:f6:82:82:0e:e2:df:3b:9d:26:03:8b:e3:f9:
49:3b:55:1f:b9:fb:3c:ee:a0:70:81:59:02:8f:e1:f0:7a:85:
02:b6:90:6a:12:95:7c:16:97:61:67:e6:2f:e7:e1:6f:08:7e:
19:18:40:e2:71:68:34:f3:bb:d5:c9:d6:e6:93:dd:46:f0:e6:
98:43:ba:5f:f3:a4:78:10:94:53:5e:ec:47:a3:13:94:40:5e:
b5:c3:12:26:f5:45:27:2f:cc:bc:c8:a8:7f:59:7c:c7:aa:52:
37:e0:ac:af:07:45:b8:86:6c:fa:35:45:17:db:ff:c1:e1:ba:
0a:14:18:54:3c:58:1f:94:d1:fe:1d:e9:3f:24:3b:dd:46:10:
4a:a6:a2:a4:8b:2f:98:b5:6e:04:24:86:de:9f:ef:86:ec:de:
b6:e2:a1:3d:44:7e:5d:a9:7a:10:11:b8:86:30:f7:d0:f3:72:
bc:dc:c2:f4:2e:d4:55:40:f2:4f:44:f5:e8:01:92:c3:2d:f1:
e9:f5:f5:c5:09:1e:1d:1e:1e:e2:d4:9d:4a:53:fe:54:69:66:
7f:67:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:24 2025 by rpki-client