Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: 5wLSRFRwjMtKXG5/AvHL/yOA8fJbnrfCGXQ/LNvoMxs=
Subject key identifier: 8F:D2:E8:07:FD:E9:D3:A1:D1:2E:FB:99:E7:56:9A:18:56:4B:94:73
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 01984AE587F527BF7D912DDBC8367D396839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 0160
Signing time: Sun 27 Jul 2025 08:00:13 +0000
Manifest this update: Sun 27 Jul 2025 08:00:13 +0000
Manifest next update: Mon 28 Jul 2025 08:00:13 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: gJ4oD709G2iVzyCMnF3MLzyQd1l2FjXqCD5UTZ+lh6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:87:f5:27:bf:7d:91:2d:db:c8:36:7d:39:68:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Jul 27 08:00:13 2025 GMT
Not After : Jul 28 08:00:13 2025 GMT
Subject: CN=8fd2e807fde9d3a1d12efb99e7569a18564b9473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:ea:2b:ea:14:f2:d8:16:02:f7:10:32:30:
e7:99:e1:1e:f8:7d:7d:76:fe:7d:1d:b0:1a:52:42:
16:90:4f:a6:6a:fe:3d:f1:da:9a:aa:fd:ed:c7:7f:
cd:e9:2d:30:9c:cc:2e:06:2c:3f:db:38:5b:57:ed:
5e:a6:05:39:c3:53:0e:52:31:9a:19:13:84:de:14:
62:f4:c8:2d:dc:b6:61:52:92:05:34:d3:34:03:1b:
f7:69:5c:f4:88:7e:70:24:2d:dc:ba:4d:90:60:65:
1d:5f:93:18:9d:76:d5:b1:54:a7:5b:0f:11:cf:56:
e0:03:d5:45:57:51:8b:97:86:1e:d6:57:28:6f:41:
cd:c4:8d:c2:7e:c7:ec:f5:ca:91:31:3b:55:01:ec:
84:c8:75:62:07:7b:54:1e:61:58:30:90:cb:60:57:
a9:9e:7e:04:88:9c:9e:25:58:5f:d4:c4:6e:b4:4a:
e7:c4:7f:d7:0f:0f:02:7d:7f:ec:36:bb:0e:da:0b:
3e:a9:ab:61:f2:fd:fd:e4:6d:ce:8e:8d:36:78:f8:
87:9b:4b:98:68:2b:2e:39:70:07:83:5b:03:10:64:
ba:a9:bc:30:c8:84:6c:ff:a4:68:46:85:ba:8a:c7:
1f:5d:17:2c:36:c5:6b:6f:ad:b7:0e:d6:d8:d4:3b:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:E8:07:FD:E9:D3:A1:D1:2E:FB:99:E7:56:9A:18:56:4B:94:73
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:14:74:09:bd:e6:16:68:a7:1e:e5:23:b5:5f:c9:56:17:
5a:9e:1b:2f:d1:a8:7a:f3:63:d8:c4:5c:06:c0:4a:96:af:36:
c9:68:fe:37:19:dd:f4:04:19:53:65:88:ca:c0:04:3b:e8:96:
c9:0f:3b:33:78:79:28:d2:96:a0:f4:2e:cc:b4:8c:ff:44:51:
e2:8d:31:7a:e7:c3:14:fa:4b:08:99:34:5b:c2:30:f3:02:d3:
da:73:21:f9:40:41:f1:95:01:70:cc:18:73:fc:5a:5e:9f:89:
a8:7a:b9:50:2b:09:58:e3:b7:9c:64:83:24:50:47:9b:9c:8a:
cb:5c:d1:3f:73:f4:8b:75:ab:1d:dd:79:c0:89:6f:62:7f:d0:
c8:dd:82:29:ed:5e:53:06:49:c6:3e:f0:31:38:b5:3c:8a:59:
21:3e:32:d1:d1:a0:e0:7b:f0:7e:77:35:54:61:17:42:66:f4:
20:a8:f5:65:c7:62:f6:fa:3e:43:4c:11:ee:af:7f:02:01:84:
62:ae:d7:59:d2:74:42:c6:b5:8b:52:95:70:fb:be:68:12:df:
69:56:64:99:21:4a:af:28:60:ac:85:e1:68:19:75:25:e4:38:
1e:c0:91:39:b1:2a:f1:b7:0b:c4:c1:b8:34:35:44:4d:bf:8f:
c6:ab:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:18 2025 by rpki-client