Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: JMOQ/kxd0l39vyA3SgetoA6qxpfITLCug0bg74g2jDg=
Subject key identifier: 98:71:D3:89:F5:0F:0E:91:89:D6:3E:C8:A1:D0:79:B3:CB:D9:CD:03
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 01985344625DFD0B594A619DF9CACFF23FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 113A
Signing time: Mon 28 Jul 2025 23:00:47 +0000
Manifest this update: Mon 28 Jul 2025 23:00:47 +0000
Manifest next update: Tue 29 Jul 2025 23:00:47 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: brobbLc4VUEtGvOYKD2EUPIo6Hp/FCP6dOfOW7M9Gxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:62:5d:fd:0b:59:4a:61:9d:f9:ca:cf:f2:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Jul 28 23:00:47 2025 GMT
Not After : Jul 29 23:00:47 2025 GMT
Subject: CN=9871d389f50f0e9189d63ec8a1d079b3cbd9cd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:ad:2b:45:a1:11:61:47:5f:4e:8c:6d:dc:
2f:0d:6e:91:f6:e2:cc:e5:5c:e3:72:4c:2e:15:99:
c7:06:f6:ce:64:8c:00:b5:f3:db:db:20:53:8e:7b:
66:5f:84:d1:72:7f:54:f3:de:23:93:2b:c5:5f:f5:
bb:1b:06:6c:7f:fa:57:27:3b:99:0a:bc:a1:22:1c:
7c:57:73:a5:65:61:5e:a5:22:ae:e5:5a:2a:1e:56:
fc:96:90:79:36:3f:e8:c4:3c:12:65:c2:5b:c5:c0:
ad:66:69:67:49:ce:0c:67:36:ae:cf:a3:2b:fa:af:
b7:ce:a3:46:a5:68:f2:7f:65:da:63:be:5e:8c:27:
91:74:a8:6f:dd:be:64:47:c2:55:3d:dc:be:03:09:
cb:87:14:99:05:13:dc:b3:f5:84:40:a1:a7:d4:33:
94:ff:c9:bb:a6:d5:d7:f2:00:c1:0e:0e:03:21:bb:
5d:b8:f8:b0:3c:79:4d:87:68:34:9c:d6:96:1c:9f:
3c:20:73:c2:12:8c:f2:1d:bc:d0:5e:44:6b:df:a5:
52:0f:5c:56:88:a3:c0:5c:26:a9:d4:38:87:22:f1:
4f:0b:e4:7f:92:71:ef:07:fa:92:15:cc:25:4a:d9:
3d:6e:b6:5e:a2:c0:fb:1d:61:46:8d:58:b5:88:b7:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:D3:89:F5:0F:0E:91:89:D6:3E:C8:A1:D0:79:B3:CB:D9:CD:03
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:76:3c:5a:92:d3:6d:a0:30:b1:a5:01:d0:6e:8d:46:96:
1b:e1:83:a5:6a:54:49:8a:7d:da:0e:e1:fb:a9:be:76:09:7d:
9c:37:88:94:90:87:9f:b9:d5:71:dc:2d:58:5a:6f:db:b7:e2:
b9:04:0a:10:0c:2d:d0:df:b2:f7:5b:33:a7:87:c9:ad:a3:67:
21:bb:f0:bd:df:e0:77:d9:10:b1:fa:5d:fc:6f:34:ab:11:7d:
49:df:1f:a4:20:6b:5c:4f:bd:a3:a5:c5:eb:ca:4c:98:84:a4:
a8:fb:a4:02:8e:19:88:ba:b3:90:9e:71:e2:8c:f0:90:13:f7:
ac:4c:b7:4c:5f:fc:cb:e0:72:f5:6c:0f:f3:02:5c:97:f3:3f:
f3:44:20:2d:eb:e6:c3:d4:e6:f5:a5:cb:2b:e2:d7:b3:31:aa:
75:6b:33:74:d5:92:67:ee:db:5a:89:0c:06:e4:53:6c:f9:a1:
97:d6:bc:a3:07:1d:9f:c6:9d:81:aa:34:0d:81:57:e3:32:e8:
9d:19:a6:48:21:29:73:d0:2d:dc:65:cf:3f:f3:9e:e6:57:e3:
08:0f:36:1b:10:38:b1:15:61:c4:23:ec:67:25:bc:d1:54:a6:
14:fe:17:ac:75:c2:5c:37:b2:ee:c2:83:46:19:8b:b0:02:c3:
18:73:6a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRGJd/QtZSmGd+crP8j/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzdjNmFlNDg4YzNhNjk3ODAzN2I3NzBhYTUyM2NiMjUx
YzlmZmEwHhcNMjUwNzI4MjMwMDQ3WhcNMjUwNzI5MjMwMDQ3WjAzMTEwLwYDVQQD
Eyg5ODcxZDM4OWY1MGYwZTkxODlkNjNlYzhhMWQwNzliM2NiZDljZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj56tK0WhEWFHX06MbdwvDW6R9uLM
5VzjckwuFZnHBvbOZIwAtfPb2yBTjntmX4TRcn9U894jkyvFX/W7GwZsf/pXJzuZ
CryhIhx8V3OlZWFepSKu5VoqHlb8lpB5Nj/oxDwSZcJbxcCtZmlnSc4MZzauz6Mr
+q+3zqNGpWjyf2XaY75ejCeRdKhv3b5kR8JVPdy+AwnLhxSZBRPcs/WEQKGn1DOU
/8m7ptXX8gDBDg4DIbtduPiwPHlNh2g0nNaWHJ88IHPCEozyHbzQXkRr36VSD1xW
iKPAXCap1DiHIvFPC+R/knHvB/qSFcwlStk9brZeosD7HWFGjVi1iLepmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhx04n1Dw6RidY+yKHQebPL2c0DMB8GA1UdIwQY
MBaAFI53xq5IjDppeAN7dwqlI8slHJ/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEt
NGE0NzFlNmMwZWYyLzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEtNGE0NzFlNmMwZWYy
LzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAt2PFqS
022gMLGlAdBujUaWG+GDpWpUSYp92g7h+6m+dgl9nDeIlJCHn7nVcdwtWFpv27fi
uQQKEAwt0N+y91szp4fJraNnIbvwvd/gd9kQsfpd/G80qxF9Sd8fpCBrXE+9o6XF
68pMmISkqPukAo4ZiLqzkJ5x4ozwkBP3rEy3TF/8y+By9WwP8wJcl/M/80QgLevm
w9Tm9aXLK+LXszGqdWszdNWSZ+7bWokMBuRTbPmhl9a8owcdn8adgao0DYFX4zLo
nRmmSCEpc9At3GXPP/Oe5lfjCA82GxA4sRVhxCPsZyW80VSmFP4XrHXCXDey7sKD
RhmLsALDGHNq1Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:17 2025 by rpki-client