Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: CiIMpnlMikwhUY/K0JPrhKAxo+hdowN1k5Hi79InDl8=
Subject key identifier: 5B:A9:EE:DC:2C:3C:62:03:2B:5C:58:EB:EB:8C:9C:78:F3:FE:AA:2F
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 0198D54E8975CBE1521BE747F91A632C75D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 087A
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: AZGTSNe1VQNHQGxRu1lnaiLK3nKBkb8Y13gZPl/oStM=)
2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:89:75:cb:e1:52:1b:e7:47:f9:1a:63:2c:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=5ba9eedc2c3c62032b5c58ebeb8c9c78f3feaa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:92:f5:d0:ab:72:d6:a3:bf:ed:d0:4c:79:
94:c4:fb:45:d8:cf:ac:b5:64:0e:63:c7:31:58:96:
cb:a3:2a:74:00:e7:70:93:fd:b8:35:1e:61:5c:26:
9f:4e:65:81:66:5f:21:db:e5:09:ae:37:c3:89:cf:
c2:56:01:87:7d:89:f5:05:fe:7f:b3:87:0c:3b:0d:
0f:33:15:22:3e:1e:d6:d1:38:2e:21:59:5c:85:ae:
52:88:3f:d2:a7:78:b3:81:aa:b1:c4:37:ea:52:71:
e1:0a:93:57:5c:46:07:4f:93:f0:61:af:c4:c8:de:
cc:50:9a:fc:a7:c0:c2:67:a2:cb:bf:50:6c:ef:93:
78:43:84:2c:d5:7d:da:20:6a:0a:0f:41:a9:f4:4f:
fd:8a:f1:f1:f8:d6:d4:72:7d:b1:6e:0c:6c:a6:cc:
40:32:29:ab:ab:0f:98:43:f6:e8:a3:44:75:5d:f1:
dd:4c:63:3d:7c:6e:fd:8c:a5:67:87:81:68:87:4d:
10:7b:1b:8b:a7:a7:57:84:bc:ae:34:a7:ae:1a:15:
ed:7f:19:04:27:98:dc:ab:03:0c:d2:4f:ab:66:73:
75:45:85:da:47:71:a8:73:c0:32:63:4e:ce:33:fd:
79:78:91:52:d5:6a:b7:57:e1:17:e4:bb:de:a4:04:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:EE:DC:2C:3C:62:03:2B:5C:58:EB:EB:8C:9C:78:F3:FE:AA:2F
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:88:ff:4e:17:3d:27:2b:8e:50:02:f4:e5:81:cd:66:5a:09:
3e:2b:66:dd:64:af:88:c0:cf:ef:3b:01:c8:bd:a5:eb:ed:52:
fe:e7:74:45:9e:77:5c:9c:26:c6:1f:11:91:0b:e6:db:31:c3:
1b:4d:75:a0:d4:70:cb:e8:d8:bb:ea:e5:df:73:b0:57:95:62:
31:93:69:9e:55:7b:18:72:0a:f1:b4:25:ec:2b:0f:3f:b9:d5:
5c:93:b1:c6:7e:c0:49:54:dc:20:4a:80:93:65:0c:ea:6c:14:
e5:bb:9d:74:0f:f8:38:6a:a4:28:f9:c0:cf:f3:d7:aa:47:70:
f9:4c:35:67:78:13:4b:69:50:6d:c7:0d:a5:54:a7:a7:39:5e:
4c:0c:2f:a0:6a:66:f9:e6:2c:4a:25:c6:fc:74:39:01:0e:8c:
b0:80:4d:24:12:5a:4e:a4:3a:ea:b5:21:49:49:3d:c5:3a:d6:
4e:1e:a1:5f:f1:f3:71:94:fc:d2:3c:5a:d8:6d:70:15:ba:06:
1c:00:fe:e3:19:82:3a:43:ee:55:b2:f6:d3:f7:ed:df:ac:02:
2e:ec:1d:2b:58:23:34:f1:95:65:42:56:22:c4:97:e9:f9:43:
75:ab:f0:d6:22:f0:77:5b:15:5e:5d:c7:88:2a:25:b2:1c:08:
0c:d9:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:28 2025 by rpki-client