Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: OXQ+ET3HuUzWaZ8pygJ3bnS3lofUdjgorGHT0RYWuAU=
Subject key identifier: DF:08:4A:D8:E1:29:82:89:56:3E:90:52:EA:15:66:7B:3A:11:DC:49
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 0198D4E06F946D02972EA986D5D349E770B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: YyJ6mCQqXIpVdo1brBd6+VCsMf7lq63QD1P0vRhUs5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6f:94:6d:02:97:2e:a9:86:d5:d3:49:e7:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=df084ad8e1298289563e9052ea15667b3a11dc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:6e:4d:36:e2:a9:8f:0f:4c:e0:8c:a9:5f:
31:b0:00:1c:cf:34:70:01:f2:92:75:08:d5:18:d4:
99:41:cf:ef:f7:31:3a:1a:1f:c6:bd:86:b0:03:0e:
ac:ee:8e:ae:78:56:99:a3:77:9e:05:86:f6:67:c7:
f0:59:1e:ee:90:95:22:99:28:fb:5f:0e:f0:06:1c:
c1:70:c7:ff:bf:50:85:29:08:bf:ca:7c:e6:2d:30:
aa:06:24:61:c0:20:60:2a:5f:b4:d8:e7:28:5e:74:
61:4a:a0:7b:42:82:d9:ae:b8:23:82:49:28:1f:c2:
e5:21:12:5e:27:e9:66:ec:89:e4:23:ca:e4:86:c0:
a8:56:86:fa:d7:14:b8:d3:a2:68:4f:ce:cc:0b:93:
22:c3:c8:34:4c:99:25:74:b0:2d:50:c0:c8:bf:31:
6a:dc:8d:83:51:ea:28:fb:01:30:7a:3a:ac:5c:a8:
45:f9:77:87:94:62:98:d8:fd:e8:89:e5:4b:4b:2e:
a8:8a:47:ad:74:1b:cb:de:31:d7:f4:ee:f3:8d:0f:
b5:1f:0b:71:84:09:e9:db:82:23:f4:61:57:08:04:
31:48:32:62:fa:09:cf:f4:79:a5:c5:a3:ad:f7:ce:
89:11:49:d8:15:db:51:fa:15:c6:8a:68:5c:ef:ee:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:4A:D8:E1:29:82:89:56:3E:90:52:EA:15:66:7B:3A:11:DC:49
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:c0:b2:bf:bb:0e:61:d8:0e:ff:55:43:f5:62:01:0e:54:
8b:c4:3c:c6:72:e3:8c:80:80:2e:c7:17:75:eb:e9:03:fa:65:
f1:78:10:2d:30:9d:6d:9b:61:9e:eb:27:64:00:b6:e8:52:4e:
23:29:cf:64:e1:66:59:4b:ee:39:17:33:03:3d:8d:e0:17:db:
ad:f9:ad:30:8b:ea:a0:13:8a:2d:7f:72:1a:b7:8c:e6:58:dd:
cd:6b:48:9c:56:f1:ab:dd:86:36:c8:be:6f:17:3a:37:b7:a8:
af:5d:f7:4e:bc:24:8f:29:cd:65:6e:b9:0d:2d:e2:f0:1d:c4:
9f:53:f2:1e:cf:36:c8:23:af:4b:e6:0a:4d:e4:82:f9:68:65:
32:ea:a4:91:19:6f:13:eb:bb:6d:51:e7:67:f7:56:df:92:88:
ec:c3:09:25:0a:89:c3:8e:61:b2:67:fe:f6:c8:f8:c4:e4:ea:
29:c8:43:0d:49:6e:c1:69:e2:d5:c4:4d:96:5c:25:da:ee:3e:
32:14:73:aa:a2:fc:09:14:80:dd:84:21:48:25:2a:d9:7b:08:
43:a9:5b:21:c6:7f:bf:0c:80:e3:3f:3c:cb:c4:bc:55:8d:52:
75:cd:d4:46:61:c3:26:d6:5f:3f:f1:ef:79:01:06:67:72:e7:
d2:5c:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:10 2025 by rpki-client