Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: 89bZJpIE+gKCs06Wq7gopt7hdXyfOSoXOwhMwj3lTc8=
Subject key identifier: C7:5E:F0:23:E4:6A:F1:D4:1F:71:4C:04:9B:46:F4:36:AF:E9:CA:07
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019854FC93EF9F370409C27D27D3B0018665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1599
Signing time: Tue 29 Jul 2025 07:01:35 +0000
Manifest this update: Tue 29 Jul 2025 07:01:35 +0000
Manifest next update: Wed 30 Jul 2025 07:01:35 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: qYxxGd7RnGFzClQTGOXZQctU9yhsT8RDYZx2WlvohkE=)
2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:93:ef:9f:37:04:09:c2:7d:27:d3:b0:01:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jul 29 07:01:35 2025 GMT
Not After : Jul 30 07:01:35 2025 GMT
Subject: CN=c75ef023e46af1d41f714c049b46f436afe9ca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:34:7b:a0:23:48:03:3e:2a:cb:93:73:86:
61:a2:40:03:8f:92:ec:7f:b6:ed:e2:f8:dc:bf:45:
1b:26:44:db:ab:7b:cb:73:f6:3a:06:59:7e:4b:72:
72:62:70:d7:24:c1:cc:12:79:5f:c7:6c:e5:d4:9d:
1f:3d:8a:c1:74:03:2f:d0:aa:80:95:c2:ee:2d:33:
b0:d2:28:9d:2f:1d:ec:5a:ce:aa:da:d5:b6:f0:79:
9a:14:0e:2d:34:87:3b:a5:79:ac:5a:31:24:48:9e:
3f:4d:6f:1a:61:90:e7:af:9d:19:60:70:49:39:67:
5b:f4:44:6c:0d:df:6e:ae:bf:7c:d8:31:f2:7c:69:
6e:7c:0a:66:44:9d:03:2d:75:ca:30:98:8f:8d:7c:
c7:7b:d1:b5:e1:a5:d3:53:88:08:e4:43:06:cd:1c:
0d:b4:c5:f4:e2:1b:83:13:71:5f:60:83:15:ce:05:
29:d5:a1:a4:94:72:09:fc:2c:f9:b3:82:01:20:d3:
0c:33:fa:fe:c6:23:d1:1f:cc:c0:0f:95:9f:62:b4:
63:13:26:22:65:0d:92:43:96:82:2b:b7:ac:c0:6f:
ef:98:70:71:b3:3f:4b:76:be:24:50:b1:f2:b1:3c:
af:4e:30:ff:b7:8d:32:4e:0b:91:f2:af:74:f1:44:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:F0:23:E4:6A:F1:D4:1F:71:4C:04:9B:46:F4:36:AF:E9:CA:07
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:a3:5c:15:c0:fd:a9:97:21:4d:b6:c5:80:fa:ca:fe:47:
5d:06:78:e3:0e:88:c9:e3:4c:aa:1e:1c:01:9d:85:82:6d:04:
62:dd:7f:cb:c0:ac:2a:54:16:5b:c9:67:c7:e5:5f:05:03:1f:
d3:1c:b3:f3:e3:67:31:72:d1:b6:90:5e:eb:68:ee:f8:87:36:
e4:0a:d3:79:32:22:8f:87:73:69:f8:3e:6d:e1:60:63:f7:2e:
12:e6:6e:9f:4e:90:6b:7d:50:1f:42:a0:74:3c:27:d1:d7:13:
50:cb:62:b9:f7:14:67:fe:a4:19:d1:29:cb:e9:57:34:dc:e1:
2b:bc:82:e6:bb:b3:39:96:74:b5:9f:b6:df:bc:50:c6:ab:96:
a1:ec:f4:e5:11:82:fe:e4:56:f0:be:3d:59:15:5b:28:df:73:
1b:7c:24:51:81:d7:73:09:d2:42:6e:76:f3:79:33:69:17:96:
ad:e9:f6:05:db:0c:13:ab:0c:7c:db:f1:80:0f:5e:da:42:11:
e0:11:08:10:01:8f:e6:0a:f7:3a:0c:9b:b3:8f:df:64:70:6f:
9c:c0:5e:69:99:da:28:00:d5:7f:66:c6:5b:44:44:f6:96:d2:
84:67:ac:35:d8:c2:e0:0e:89:4c:48:cd:a3:60:77:d2:05:3f:
24:ae:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:49:39 2025 by rpki-client