Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: rv48qFav9kzJWXMpPdbhARs3TBgVxFo+uoCj+h1gSrw=
Subject key identifier: 2C:8B:E9:BD:C1:AB:8E:A0:E9:E3:AA:07:F3:6A:E2:F0:EA:82:AA:9B
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0198D583B898E05F3089E55774F354E4BAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0ABF
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: eW6PsdqNblsoP55YWub+iQUfd3UcbxTvswLIbIcgAec=)
2: TYeQm-B0o6O_Gvpp8hOOtZ-gGJw.roa (hash: IdJGuhU17D6k4ubGV10TGtirgX+/WChDIAYbwSldd8g=)
3: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b8:98:e0:5f:30:89:e5:57:74:f3:54:e4:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=2c8be9bdc1ab8ea0e9e3aa07f36ae2f0ea82aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:ed:a3:43:ca:75:d0:e2:d7:41:fa:54:8e:
8d:d8:d1:7c:42:c6:8f:3d:26:dc:78:d2:44:41:5a:
2e:97:9c:24:a2:74:4c:86:8e:41:e9:8c:29:21:95:
95:4e:e7:57:fd:7a:1c:1f:3a:62:57:27:4f:80:c1:
c7:a4:fa:ac:43:f7:77:96:0c:4c:a8:ef:14:2a:1d:
7d:38:b3:47:f8:c6:2b:e2:ec:4c:0d:ab:bd:c4:2d:
65:70:c4:83:12:4b:9e:91:cc:eb:1f:8a:d3:06:60:
d9:f5:70:08:69:81:36:47:a5:5d:83:50:11:97:bd:
44:b3:85:9b:02:1a:0d:53:bc:f3:66:e3:04:c8:30:
dd:df:33:8e:be:92:71:ff:e8:41:dd:6a:56:ad:9a:
18:07:87:45:f9:5d:d1:e3:25:a0:eb:65:8a:e4:56:
4c:98:47:94:ba:f4:5c:f3:21:d8:e6:89:68:89:fc:
7a:f2:ce:88:ab:ce:0c:e4:be:3e:04:5b:86:ab:93:
46:80:60:f2:e9:94:35:ca:d5:7b:fd:e2:b8:56:10:
ad:65:71:04:85:74:1c:fe:37:94:02:cd:65:89:65:
2e:3f:98:fd:62:8b:e7:41:1e:ff:b4:c1:f6:4d:81:
11:40:ec:00:33:27:28:80:e7:34:f9:4f:e6:5b:47:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:E9:BD:C1:AB:8E:A0:E9:E3:AA:07:F3:6A:E2:F0:EA:82:AA:9B
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3e:4c:92:7d:08:f3:39:38:12:a1:94:97:f9:1c:e9:69:92:
d9:0f:7d:73:78:c5:69:2d:0b:9b:f5:a4:e3:e4:f8:71:48:8c:
82:db:7a:94:ae:a2:9a:24:04:8b:4f:6a:a0:e0:d1:e4:5c:75:
7d:71:7b:fd:56:a1:0c:99:c7:66:fb:86:22:30:a4:dc:50:50:
da:4a:5f:77:41:e5:a7:43:78:a5:66:c6:c8:eb:ef:5f:d3:e1:
9b:3d:ea:fc:34:64:23:d9:73:6d:29:28:67:9c:ca:9b:ff:27:
59:48:1a:a3:3b:75:bb:99:8e:d9:43:91:55:ea:67:9b:c2:5d:
8d:4b:fa:01:20:4e:82:68:41:b6:42:6d:58:69:83:6a:e6:dd:
b0:77:ff:aa:ce:c7:71:4c:a0:e8:9e:4a:95:65:f0:bb:a0:13:
1e:97:3e:0d:1b:36:66:44:be:ca:54:f8:7f:f3:90:4c:5e:8c:
1a:0e:08:66:31:8c:4b:b2:55:2b:a1:e8:74:d7:6c:af:19:3b:
b9:a8:3c:81:db:6d:57:4c:b6:46:74:40:56:13:ba:9a:39:1f:
3a:69:e1:fa:f1:02:16:98:bc:e3:c9:af:cb:91:fd:d9:47:c5:
e9:07:19:ef:55:b9:19:0b:3c:4f:2c:b7:f6:28:f8:ad:6d:7f:
a1:50:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:44 2025 by rpki-client