Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: sP+Zw+JMwSlPbdPEFbLmoZOnLq6pyBkXFCnJqMpHPiI=
Subject key identifier: 21:BF:A2:8F:AD:DB:0F:42:0E:6E:D4:F8:6D:CC:3A:49:A6:39:D7:36
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 01984475ED20FDDC2AB33109E16E80D3069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 08F6
Signing time: Sat 26 Jul 2025 02:00:35 +0000
Manifest this update: Sat 26 Jul 2025 02:00:35 +0000
Manifest next update: Sun 27 Jul 2025 02:00:35 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: p0H7nv6Au8qCboGf0zJXPRweq4ggI82q/R7qNTh+6+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:ed:20:fd:dc:2a:b3:31:09:e1:6e:80:d3:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Jul 26 02:00:35 2025 GMT
Not After : Jul 27 02:00:35 2025 GMT
Subject: CN=21bfa28faddb0f420e6ed4f86dcc3a49a639d736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:40:75:03:3c:f7:8a:20:00:c6:90:00:fd:
71:a2:f2:2b:00:78:77:c2:c8:7f:a6:da:09:4e:29:
a1:06:d9:71:12:0b:b4:48:2a:af:df:e2:56:e6:a3:
3a:85:41:ba:f2:70:2b:dc:bf:ae:89:2d:35:58:ec:
1b:28:98:01:e9:9a:50:fb:5b:68:be:6f:74:04:f0:
ce:e9:29:e9:92:9c:b8:d5:e3:0d:ce:07:b2:b6:b4:
19:9f:46:cb:61:4e:a6:df:98:a9:ac:c5:32:78:40:
da:0a:7d:46:b4:7e:ac:ac:c1:ed:86:61:65:1d:01:
4b:da:22:7a:6e:c2:e4:b5:b6:49:5f:7b:83:03:aa:
2e:51:7e:1b:b3:56:42:64:b1:d0:21:a9:21:9e:a7:
53:d1:22:7e:49:9f:ef:ce:bb:1a:25:8b:38:76:a9:
85:f8:95:fc:0e:c0:7d:c5:17:e8:60:6b:d2:8f:d0:
df:25:cd:d1:d7:1e:62:d2:df:e8:95:8b:0e:ce:37:
4b:0a:b1:d8:42:ca:79:67:d7:b3:a2:1b:df:ca:2c:
54:67:21:b7:b1:98:44:3a:bb:cf:ef:87:ab:b9:a7:
91:f8:5b:b5:39:f3:21:83:33:59:77:5a:77:48:f7:
8e:85:ec:92:e1:3b:d4:c9:e4:b7:2e:5d:5b:f0:0f:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:A2:8F:AD:DB:0F:42:0E:6E:D4:F8:6D:CC:3A:49:A6:39:D7:36
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:25:33:81:3c:01:a5:c0:a0:26:17:ad:25:09:56:df:03:
b4:9c:0e:2a:8a:de:82:b5:87:55:6c:25:66:82:25:9d:11:65:
04:5a:6c:cb:0e:16:4d:13:96:d0:79:f2:bb:cb:ee:cc:92:ce:
e7:24:4f:de:e5:a4:56:e6:85:f7:e8:b1:59:01:fa:71:8f:eb:
3f:55:94:7b:b1:91:54:01:39:7e:41:ca:33:81:80:9d:05:6d:
e8:a4:99:db:15:e2:8e:59:ca:59:f2:34:f6:01:16:f9:6c:3c:
7d:99:74:80:12:54:be:03:d9:f4:25:fd:53:25:83:80:e7:52:
93:30:af:50:47:f1:b5:67:c4:52:92:e7:f6:12:2b:c5:b9:43:
2c:62:02:a3:79:1c:c9:dc:ff:7d:f2:12:b3:34:64:6e:7b:08:
74:c5:c7:bf:dc:98:3f:d4:77:df:9d:f8:64:78:f6:38:c4:7e:
98:20:c3:b7:5a:80:77:b1:84:b1:f6:73:82:22:53:74:d1:ef:
fa:f0:9e:39:92:5a:32:57:d6:56:f9:15:fe:36:aa:9a:42:e8:
df:46:d1:8c:46:66:a3:c1:ac:d3:35:ff:5a:39:9a:7c:f5:6a:
54:9f:41:28:5b:39:1f:72:9b:de:a3:e0:a8:57:19:82:6e:6c:
43:65:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:56 2025 by rpki-client