Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: jJT7vXaldkAjNstSTfc5yg7QxtElZfTcMbmH7PW79ZQ=
Subject key identifier: 3C:89:63:4E:19:BD:4D:57:B5:8B:09:D5:BF:AF:01:9E:38:00:82:C2
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 0198D4E01960F4F7E00191BC804630922DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0723
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: RQUuO+HwVsOh/MaljuoENeW1Mcs51FKWkhYwVw2MtMk=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:19:60:f4:f7:e0:01:91:bc:80:46:30:92:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=3c89634e19bd4d57b58b09d5bfaf019e380082c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:5f:03:3c:f4:01:f6:98:ce:b6:31:9c:87:
dc:ea:6a:f0:7a:ae:f9:bf:d7:2e:e9:e9:61:00:b3:
4d:00:ac:dc:fe:93:9a:59:93:68:6d:35:05:0f:58:
bf:18:27:01:f5:cc:87:06:00:54:ae:e6:fd:f0:a7:
32:44:4f:8b:c9:ce:c1:20:d5:74:67:bc:8e:c8:ea:
ef:0e:a7:4d:55:c1:fe:b1:09:f9:0a:ea:b1:82:25:
dd:fd:66:27:63:ab:5d:c2:7e:ce:ba:1c:48:93:f7:
13:11:0a:8c:99:b1:2a:b5:c3:d1:da:f4:45:a2:10:
36:84:b8:99:4e:78:d1:75:85:3b:82:67:4d:2d:e8:
2a:a2:c0:0a:0e:5c:87:90:38:1e:9a:4a:5a:e0:9e:
75:a1:be:dd:fd:b7:25:7c:c6:50:7f:d2:ed:cf:73:
6b:16:1d:8e:4e:d3:41:6b:f6:c5:e3:9c:d7:3e:6c:
ab:a5:8c:8e:35:6a:98:37:b1:30:c7:30:24:ab:e5:
c3:f3:a0:17:5a:b2:7e:a9:c5:84:f2:b4:8e:7d:8c:
be:89:f8:bc:6a:98:5a:69:52:1d:1a:29:69:07:91:
39:cb:27:17:04:0e:99:f6:03:78:c8:23:a5:ab:f1:
32:c8:5c:12:a4:e4:a6:da:45:45:5b:16:76:b8:c5:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:63:4E:19:BD:4D:57:B5:8B:09:D5:BF:AF:01:9E:38:00:82:C2
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:36:a1:02:95:ad:6c:68:18:5e:65:0c:5a:b6:88:a3:0f:81:
40:b5:ba:31:35:a8:8f:9b:33:29:ac:45:0e:ff:3e:95:d1:2c:
7e:c6:7c:3e:99:df:d2:2e:a7:4f:55:d5:67:a9:4c:10:bc:f7:
4c:66:15:f1:dd:bb:45:67:64:77:86:79:53:49:c6:74:3e:c0:
98:7b:40:b8:5c:4c:0c:1a:11:1a:98:8d:05:d8:86:98:fb:57:
07:bf:d2:53:03:f1:fe:3f:bd:dd:e3:ff:b4:1f:63:90:0c:8f:
24:6d:40:eb:ff:a4:51:8b:6c:1f:32:2f:35:c1:a0:19:61:dc:
bd:21:7e:98:7a:02:31:54:9b:4c:f5:b7:7f:81:95:4f:52:17:
3b:99:66:66:ef:a9:07:71:e0:97:c1:f6:c8:dc:a0:2d:48:eb:
cf:ef:31:76:79:75:46:e5:7a:a0:8b:89:35:38:27:32:3f:87:
64:da:7f:07:0a:76:c4:01:f2:cd:a8:f0:10:0b:b6:7d:7f:9d:
a8:8c:76:53:c4:43:f3:37:08:03:e7:41:ec:bc:5e:93:ad:d0:
4e:78:81:09:f5:75:07:b1:93:82:45:ac:46:c8:c5:97:e1:0a:
ee:01:76:cb:ab:4c:47:3c:d7:fc:58:70:95:0d:02:5b:0e:9f:
71:d3:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:16 2025 by rpki-client