Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: WnwAvGPula5TocZ9Xpm0luSJd0xERg8YcPqdFvWCjB4=
Subject key identifier: 07:AA:59:1C:7A:43:65:08:45:6C:D1:82:64:31:AB:09:D1:83:3A:92
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0199C5D7AB4AAF06FCFD242B136B1EB21E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 0951
Signing time: Wed 08 Oct 2025 22:01:09 +0000
Manifest this update: Wed 08 Oct 2025 22:01:09 +0000
Manifest next update: Thu 09 Oct 2025 22:01:09 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: xkjHRe15uoBQs+/J+CXshCJgk3IoeGnLi84YW6cEsqE=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d7:ab:4a:af:06:fc:fd:24:2b:13:6b:1e:b2:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Oct 8 22:01:09 2025 GMT
Not After : Oct 9 22:01:09 2025 GMT
Subject: CN=07aa591c7a436508456cd1826431ab09d1833a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:4e:82:5a:35:21:36:c3:bd:b9:a2:0f:27:
cf:c5:7f:ee:e2:7a:1c:79:5a:ed:3f:38:fa:20:89:
76:95:06:37:85:b0:d6:4d:b2:56:bc:96:fb:b8:46:
29:b1:e4:f2:c6:43:ed:3f:89:04:2d:5e:00:69:f2:
52:e2:5d:02:23:74:21:6e:18:5b:5f:fe:8a:85:03:
61:f5:e3:1d:f5:14:c7:d4:2d:3a:e6:55:56:85:3e:
a4:15:b7:f2:af:ae:fa:42:84:e8:0d:7a:d7:b4:35:
8b:8c:c5:7c:72:6b:f9:0f:40:cc:61:5f:45:fa:4f:
61:33:1b:21:4e:cc:2d:79:16:08:42:c6:12:b6:dc:
08:2a:27:02:dc:e9:e4:9c:e0:da:c0:da:3d:fd:b6:
f4:6a:27:94:7d:47:9f:9f:ae:e9:dc:ba:5c:cd:a7:
f6:2c:65:d9:c9:b9:24:7e:2b:81:eb:3a:79:a8:48:
b2:f8:7e:4f:4f:a0:bc:e9:24:3a:96:35:6a:ab:2c:
ed:1a:11:15:9f:99:d4:2e:33:e4:aa:30:e4:84:9b:
04:03:ff:7c:52:bc:92:68:cd:65:68:47:e6:04:78:
b3:84:ee:78:f3:2f:e6:bb:90:fa:72:32:48:71:f1:
41:d3:e9:24:49:6d:c5:09:5b:4f:ab:85:f8:65:28:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:59:1C:7A:43:65:08:45:6C:D1:82:64:31:AB:09:D1:83:3A:92
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:01:0d:45:0d:d5:fc:a6:b0:2d:92:72:16:a1:f2:f9:91:22:
a2:ec:96:68:92:1c:8a:f3:c0:8a:d1:4c:11:32:c1:fa:7b:ee:
e8:d5:56:00:a0:03:33:3d:9c:69:8a:68:e5:bf:fe:45:f0:41:
7e:25:6a:dd:48:cb:23:3c:c3:81:25:e2:b4:9d:42:24:24:92:
11:f0:f2:8a:ae:26:3a:80:88:82:e6:df:15:3d:76:80:2f:91:
4e:c1:7c:9d:ff:35:88:f0:14:18:f0:ce:e6:9b:ca:ce:6d:b0:
8a:b5:22:d6:a5:59:a0:00:25:fe:99:c8:90:ba:51:b2:52:69:
9f:1e:d6:1f:9d:16:5c:bd:9c:85:37:a8:e6:46:69:08:89:47:
bc:7f:e1:a8:e5:8c:16:a0:22:98:c0:b8:87:d6:e7:19:bd:e8:
41:37:07:aa:89:2c:32:ed:0e:1c:1a:22:d8:62:f3:79:b9:50:
78:62:b3:b4:fb:7a:69:11:0b:be:4f:c3:bb:1a:e9:e0:38:4a:
6b:5b:02:46:e1:8d:5e:53:ec:e9:da:c9:fb:f9:3c:6c:a7:6f:
52:16:d3:76:9a:03:c6:27:51:8d:15:b5:ff:41:63:c9:3a:9c:
a8:1a:f4:3c:d9:c1:b5:37:63:88:cd:99:e2:04:48:ad:86:64:
cc:63:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:33 2025 by rpki-client