Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: wHYgpXCbGE4rRCp4EtopTOrZB1oci92O9PBHdLdeGq4=
Subject key identifier: AF:AA:5B:51:DC:25:A3:EA:E1:8F:0E:71:FB:54:4B:CC:65:29:33:C3
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 0198D7058E0C93FE4FF30CE3B364C4263218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 085A
Signing time: Sat 23 Aug 2025 13:02:02 +0000
Manifest this update: Sat 23 Aug 2025 13:02:02 +0000
Manifest next update: Sun 24 Aug 2025 13:02:02 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: PDL0o6LE8nE39gLK0z8XockZSFgeboF7PSn8644JsQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8e:0c:93:fe:4f:f3:0c:e3:b3:64:c4:26:32:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Aug 23 13:02:02 2025 GMT
Not After : Aug 24 13:02:02 2025 GMT
Subject: CN=afaa5b51dc25a3eae18f0e71fb544bcc652933c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:d5:3d:69:61:c1:10:bb:12:a7:aa:fd:b7:
6b:4d:05:48:b5:b0:2a:89:4c:df:0c:7e:50:fd:6d:
93:0d:0a:1a:89:a9:87:92:41:1b:b1:63:a8:42:86:
37:35:d3:65:01:d2:7f:95:e9:b1:6a:75:84:f8:18:
fe:c3:ba:73:44:9a:67:fe:34:18:12:ed:ac:3e:7b:
f6:03:a9:14:75:d4:4c:e1:7a:8c:59:a5:d9:9e:a7:
c8:a4:79:a3:26:fe:1b:e1:a1:af:78:40:ad:64:35:
7c:f3:a3:67:0a:10:19:27:02:c5:52:c4:59:59:e4:
a7:ec:85:da:d4:c6:e7:bc:f5:f8:30:c1:92:dd:22:
33:c6:08:99:17:15:c7:24:3b:7d:5e:75:84:e0:a1:
97:f0:04:88:3f:bf:12:df:3f:63:a0:85:e9:cd:78:
a9:4f:c4:4b:d9:83:bd:db:92:39:ae:de:f2:37:d4:
e8:6b:41:26:dd:af:a5:63:fa:0b:cf:d7:8f:8a:78:
e1:a2:e1:69:80:af:8a:3f:a5:94:54:b1:70:c4:b3:
b5:22:ae:78:30:cf:63:cb:df:bd:f0:fc:77:17:8f:
64:30:bf:77:af:24:d5:cc:87:82:35:42:ae:89:79:
14:2d:f2:5b:e8:16:98:0d:84:35:30:9b:d2:48:06:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:5B:51:DC:25:A3:EA:E1:8F:0E:71:FB:54:4B:CC:65:29:33:C3
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7d:1f:33:e3:6c:3d:43:4c:36:d1:5d:55:18:13:23:96:bc:
a7:44:0f:06:ff:a7:81:18:0e:b3:44:2d:ff:75:af:6d:c1:5e:
b2:78:af:3e:1a:64:14:98:29:8c:27:36:67:79:54:2d:58:b2:
18:ee:16:5f:c7:fa:43:85:52:e0:d2:3d:35:c1:e3:39:e5:56:
6e:e3:08:42:88:1d:94:7e:e4:51:f7:13:49:54:48:34:aa:f1:
63:5c:97:6a:6d:8e:ae:7e:30:7e:fd:52:02:2f:b9:9c:fe:7a:
87:80:41:8c:c6:31:b3:ba:a5:bc:99:dc:a2:5f:c3:4c:bb:a1:
da:39:e6:2c:2b:e7:66:ac:e0:d4:3a:3e:13:9e:ab:61:b2:9a:
16:a4:33:f6:42:e4:1a:bc:7a:9d:53:32:74:e2:1e:5c:d4:3e:
a4:35:76:60:71:ba:64:92:62:7b:10:96:15:37:9e:16:d8:26:
56:4c:f3:ef:e9:94:06:75:45:d7:78:3c:2b:1c:1e:9e:6c:89:
a2:2e:f1:96:87:f9:1a:af:a8:1a:59:44:f1:fc:5f:e6:7c:03:
19:62:2f:be:d8:95:b4:ca:e8:43:23:fa:28:da:a7:9c:08:67:
95:38:2c:df:5f:9b:bc:c1:2d:3d:9e:02:df:90:a6:b2:c8:a5:
3c:b2:76:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBY4Mk/5P8wzjs2TEJjIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy
ZmNhODQwHhcNMjUwODIzMTMwMjAyWhcNMjUwODI0MTMwMjAyWjAzMTEwLwYDVQQD
EyhhZmFhNWI1MWRjMjVhM2VhZTE4ZjBlNzFmYjU0NGJjYzY1MjkzM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX/VPWlhwRC7Eqeq/bdrTQVItbAq
iUzfDH5Q/W2TDQoaiamHkkEbsWOoQoY3NdNlAdJ/lemxanWE+Bj+w7pzRJpn/jQY
Eu2sPnv2A6kUddRM4XqMWaXZnqfIpHmjJv4b4aGveECtZDV886NnChAZJwLFUsRZ
WeSn7IXa1MbnvPX4MMGS3SIzxgiZFxXHJDt9XnWE4KGX8ASIP78S3z9joIXpzXip
T8RL2YO925I5rt7yN9Toa0Em3a+lY/oLz9ePinjhouFpgK+KP6WUVLFwxLO1Iq54
MM9jy9+98Px3F49kML93ryTVzIeCNUKuiXkULfJb6BaYDYQ1MJvSSAZVCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+qW1HcJaPq4Y8OcftUS8xlKTPDMB8GA1UdIwQY
MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt
NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5
LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX0fM+Ns
PUNMNtFdVRgTI5a8p0QPBv+ngRgOs0Qt/3WvbcFesnivPhpkFJgpjCc2Z3lULViy
GO4WX8f6Q4VS4NI9NcHjOeVWbuMIQogdlH7kUfcTSVRINKrxY1yXam2Orn4wfv1S
Ai+5nP56h4BBjMYxs7qlvJncol/DTLuh2jnmLCvnZqzg1Do+E56rYbKaFqQz9kLk
Grx6nVMydOIeXNQ+pDV2YHG6ZJJiexCWFTeeFtgmVkzz7+mUBnVF13g8KxwenmyJ
oi7xlof5Gq+oGllE8fxf5nwDGWIvvtiVtMroQyP6KNqnnAhnlTgs31+bvMEtPZ4C
35CmssilPLJ2GA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:11 2025 by rpki-client