Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: 1kKhQGqQZuQ4Nr0Lq+Qb3NGKnBT4iX6JcWgvQYFfFrI=
Subject key identifier: F8:38:3C:0A:00:3F:B5:AC:8C:4A:AF:73:32:88:7F:24:FE:54:40:15
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0198D4E096123834C82E64A1632EEC3E8ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: NC35pjAvolScjjVCuy9k/2DrKY7A4EeBbL6bVa/evEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:96:12:38:34:c8:2e:64:a1:63:2e:ec:3e:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=f8383c0a003fb5ac8c4aaf7332887f24fe544015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:73:f2:be:34:e7:b8:c0:bf:87:f1:c8:1a:
67:fe:92:f5:4b:08:08:0a:cb:55:2f:96:b1:f8:2f:
b3:7f:d4:21:05:37:1c:68:6d:8f:5c:1c:fb:a2:e4:
be:fd:fd:2f:9c:93:13:25:d5:d0:4d:de:39:d3:14:
c2:04:3e:8c:b3:05:79:83:37:3f:db:8e:dc:73:a5:
a8:6d:39:85:b1:c3:a9:86:9c:65:29:da:cf:0f:fa:
d1:11:68:e1:ad:f5:df:e4:91:8a:20:a6:c6:d7:45:
0a:24:22:ba:7a:8d:0b:47:9e:17:12:65:47:5b:83:
3b:fc:5e:1b:cc:13:28:4d:bf:a4:84:52:49:f1:f9:
04:1f:09:d7:3e:17:f1:86:84:0c:30:70:95:64:8a:
bd:30:58:88:d5:1f:4c:41:59:7c:c2:d3:63:c8:75:
34:f6:f3:d4:7d:91:8a:07:54:c3:39:2a:0c:9a:ff:
3f:1d:11:82:70:58:2c:59:4d:4c:a4:97:e8:56:42:
7b:a0:5c:5c:48:44:cc:cb:9b:b4:81:c1:67:c9:78:
6f:20:6c:ea:77:06:48:f2:f7:30:42:c5:5a:2e:18:
e7:7d:7f:dc:d8:43:db:09:58:fa:0d:d3:8f:91:0c:
e8:dc:ee:bb:91:c9:69:0f:d0:93:ba:c1:b0:48:12:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:3C:0A:00:3F:B5:AC:8C:4A:AF:73:32:88:7F:24:FE:54:40:15
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:fe:7a:ed:33:ea:f5:d5:9e:7a:d4:04:03:ed:3e:c5:a6:
7d:36:1b:f4:e4:f7:fe:b1:b0:7a:92:ba:7c:fa:41:c2:2f:37:
0a:73:3c:38:84:a6:c4:67:75:e6:30:86:e8:8d:ed:0b:7c:dc:
78:c9:fd:c0:84:b1:a1:d9:44:bc:08:8d:b2:aa:73:ea:8f:cb:
f3:98:93:89:d2:41:22:67:93:89:ff:07:af:46:6e:d9:fb:96:
f0:da:44:9e:f4:bc:80:d1:c4:27:95:36:91:70:37:8f:a5:9d:
df:c1:38:61:86:76:0c:32:2f:c0:cd:73:ab:b9:cc:db:a1:48:
8b:1b:ce:8a:06:78:ec:5d:54:82:ba:7e:91:c7:c8:07:fe:a2:
76:a7:66:fc:ab:46:c5:16:c0:fa:ab:46:d4:cd:b8:73:36:57:
4b:a4:24:08:8c:44:77:50:8d:d9:f1:c6:a6:90:eb:0b:42:ce:
28:16:18:c7:18:f0:af:c8:0e:0c:d8:48:47:26:fb:cf:cb:6c:
9e:bd:14:86:78:d3:d3:40:68:64:fa:d4:78:5b:fd:c3:dd:08:
bb:46:48:05:0e:3c:44:a6:db:12:60:b6:de:d8:0d:34:dc:91:
31:47:b6:da:6e:1c:4e:56:b7:ca:1d:10:d1:5e:9f:10:01:87:
17:b5:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:20 2025 by rpki-client