Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: 0SRhKDdZejC/CbVmaqKB/0fZ+kmoGn3yJYUfMu3TGW4=
Subject key identifier: 77:1A:A9:C6:D9:11:FD:DE:81:C7:15:5F:85:36:33:BC:C6:62:73:D0
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 0198D5BC0332A6671F78E4077FD9AAD89FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0976
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: 3TxzaduU8L0ndDWclPtUnVWSvpWJQucLc6vfrutAKsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:03:32:a6:67:1f:78:e4:07:7f:d9:aa:d8:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=771aa9c6d911fdde81c7155f853633bcc66273d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:6a:7f:88:24:13:43:cd:ad:83:7c:1d:f7:
01:29:0a:03:27:a2:48:32:70:03:6c:32:ca:8e:f4:
ed:5d:07:a0:54:5d:d7:a2:3f:0d:08:fe:ca:34:90:
52:f6:b5:bd:ab:ab:7f:5a:b6:9f:ec:59:c0:ed:de:
e3:96:ef:37:35:ae:b5:68:ad:74:35:58:4e:6d:19:
74:5c:a6:62:9e:7b:65:ae:5c:7e:48:a7:0b:33:1c:
df:b5:37:5e:22:cf:09:81:88:58:5d:b5:35:26:f7:
bf:4f:b3:11:a1:3a:1e:7b:f3:2f:49:c5:be:a7:59:
86:a5:cb:0e:dd:16:40:7a:ba:3e:63:5e:8a:d7:b5:
e1:a5:87:e7:49:68:af:5f:4a:7f:12:8c:b5:40:1d:
22:fe:2d:3d:d2:14:64:9a:f3:2a:ad:9d:b4:20:6a:
ad:6f:21:de:80:3e:41:5a:11:68:42:80:bf:b5:19:
c7:d0:1e:19:20:ef:61:da:83:76:11:1c:92:83:e2:
8e:f6:b9:9a:c5:2c:62:e6:27:4b:d4:f0:66:5e:1e:
77:e0:4d:08:cb:56:69:99:39:da:34:11:09:e3:29:
ae:00:57:b7:2f:63:b3:db:95:1e:31:d1:a9:0a:9b:
65:b0:d7:9a:64:97:3b:d8:77:01:d5:a2:da:85:ee:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1A:A9:C6:D9:11:FD:DE:81:C7:15:5F:85:36:33:BC:C6:62:73:D0
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c0:bc:f5:ef:6e:cd:dd:37:5d:50:65:26:89:a4:7b:78:73:
ff:75:96:d0:b6:88:df:cc:e4:17:3d:94:76:ef:fe:35:3d:bf:
22:c4:5c:c9:94:30:15:c1:bc:e0:16:39:41:61:7f:5d:13:d5:
8f:b9:de:10:fa:4b:35:e0:91:8a:3f:9e:24:a8:d7:3e:2f:7c:
27:db:2a:14:34:f0:03:a3:4f:c1:ea:0b:d1:d5:51:ed:51:43:
0d:a8:85:7f:64:27:97:fe:4c:e9:f5:e0:d6:4b:6a:29:f4:cd:
de:0e:e6:db:e5:0b:ff:b6:63:88:d8:b2:da:d7:24:bb:7c:fe:
dd:04:f4:23:ae:cf:5f:5c:e8:4a:c8:ac:68:fd:c1:95:ec:30:
74:29:e5:2d:71:e1:1f:75:a5:ca:8f:14:07:a9:81:96:f8:df:
47:3b:74:19:22:4d:43:2c:5b:ac:b1:54:e6:0f:8d:52:d6:8f:
80:16:fe:bc:d6:21:a4:9d:f6:fd:05:b4:e2:fc:8d:2a:a0:63:
3f:68:13:c5:d2:c7:ab:e6:68:38:bc:dc:0c:7f:eb:35:36:13:
59:fb:39:72:fa:05:c6:63:3a:38:52:57:57:9d:45:ad:22:83:
48:be:a2:ae:52:34:5f:e0:c3:dc:73:1a:e5:ab:35:01:83:9f:
53:5a:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:52 2025 by rpki-client