Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: h+YfBhWOBRw+wA4ZgeRCf2g35ncjorYSMAVx8tv31UU=
Subject key identifier: EE:C4:D5:FA:43:EA:81:69:21:B2:E0:0D:06:3B:73:08:40:81:57:7A
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0198D404D54D6BD63B6D8D7369F419DCD625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 07D9
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: nET7y3sbySe69UhxpJFoAErscX0gbKn5Im9EC+ty1LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d5:4d:6b:d6:3b:6d:8d:73:69:f4:19:dc:d6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=eec4d5fa43ea816921b2e00d063b73084081577a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:35:cc:12:55:4a:9f:ea:61:82:24:61:7d:
cf:1e:9c:cc:28:cb:4d:72:86:aa:dd:e7:1d:a7:46:
58:90:8b:49:40:5f:9f:f7:ff:9d:dd:58:58:1e:e0:
9d:da:15:e6:7f:d2:d9:fb:6c:69:44:a3:13:e4:f6:
92:13:2a:70:a7:31:de:f0:51:13:a6:93:38:d5:44:
d7:a7:4e:ac:bb:73:1c:14:15:00:a2:31:7e:79:ad:
cc:03:ba:00:07:88:19:3f:9f:29:78:06:b8:eb:f9:
be:81:96:8b:a7:bd:7e:06:c1:34:79:4a:7e:93:33:
c7:93:a3:9c:dd:69:aa:c9:b4:d1:28:ad:89:d9:e9:
35:df:15:bd:22:4f:49:33:33:cb:ec:ed:1c:52:d1:
af:69:65:ef:17:99:00:73:84:bb:7a:5b:f1:95:4f:
d2:51:cf:7f:03:d5:4b:32:59:e0:07:66:6f:50:8c:
13:8a:3a:9e:83:ee:81:40:fe:d0:cf:5b:64:5a:88:
ac:0c:ee:5d:16:da:08:64:4b:8a:50:31:2a:79:da:
9d:1b:85:14:23:6c:39:62:8f:4a:1c:1a:5c:3e:b1:
35:82:15:50:b6:8b:4c:e5:a6:fc:1b:46:86:e2:51:
82:77:5d:b4:c5:d4:5e:c1:8f:37:e3:8c:04:1c:68:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:D5:FA:43:EA:81:69:21:B2:E0:0D:06:3B:73:08:40:81:57:7A
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:b5:fc:37:72:ba:67:09:b1:89:c6:89:f5:b7:14:32:e9:
01:e0:fe:0c:52:9a:43:7c:e2:38:db:9b:91:8a:14:eb:b7:82:
83:0b:38:32:fe:c5:d3:a8:3c:8f:a9:30:84:ee:1b:c3:19:30:
0b:ac:01:2a:44:ba:11:66:c6:16:79:1e:69:48:1e:64:8f:60:
7d:9f:dd:4b:69:78:4f:ac:a5:8c:2c:8d:59:ae:3f:e8:40:c8:
8f:40:b0:d9:4f:33:63:e5:65:d3:e6:9d:7c:de:81:86:59:bb:
bb:d5:07:39:fb:b8:85:1c:43:b6:46:cf:06:7b:27:17:46:e8:
cd:e2:1b:5c:af:f1:b8:c7:fd:1e:a4:08:55:ce:75:0b:42:fd:
ce:40:13:1d:9b:72:d4:68:6e:73:dc:18:51:e6:51:8a:3c:e4:
a9:a5:b8:ef:0f:02:99:61:87:f8:02:be:4f:87:4d:73:b5:02:
58:cc:15:10:d9:34:00:b4:05:83:a9:dd:ab:d8:19:8e:0c:29:
c6:ba:d8:3a:17:21:a9:96:47:8b:2e:ea:ed:d4:b9:b2:90:a7:
a2:b5:49:b9:47:0a:91:61:8d:5f:4f:1a:6d:a6:91:b4:22:1c:
66:59:53:58:7f:8a:58:09:7d:9b:c5:9f:7b:d0:aa:60:c4:ac:
4a:69:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:17 2025 by rpki-client