Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
File: jmcNnjgoGVjuocw46s67vcM4HTY.mft (raw, json)
Hash identifier: sk5b/IGDAU3gcDxQpFSYlzLWhZo+yFOnP9pAEYUw1A0=
Subject key identifier: A4:76:41:C3:DF:C8:74:D6:55:4B:EF:2B:E1:17:0D:46:52:36:E0:35
Authority key identifier: 8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
Certificate issuer: /CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Certificate serial: 01984776FDA965A01A4C4DB4074D95991790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
Manifest number: 0ADA
Signing time: Sat 26 Jul 2025 16:00:37 +0000
Manifest this update: Sat 26 Jul 2025 16:00:37 +0000
Manifest next update: Sun 27 Jul 2025 16:00:37 +0000
Files and hashes: 1: jmcNnjgoGVjuocw46s67vcM4HTY.crl (hash: mTm944CmX5QK1zJIliIAlKly7dEU2Nfc5BL5ZAJhgl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:fd:a9:65:a0:1a:4c:4d:b4:07:4d:95:99:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Validity
Not Before: Jul 26 16:00:37 2025 GMT
Not After : Jul 27 16:00:37 2025 GMT
Subject: CN=a47641c3dfc874d6554bef2be1170d465236e035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:ce:d9:9a:a2:26:eb:50:c4:83:7b:82:04:
39:9c:ea:03:5a:5b:35:55:1f:df:99:01:4b:65:93:
ed:2a:99:57:ea:32:c6:e9:57:4e:e7:1f:3f:75:68:
e1:69:a5:93:6c:a9:15:50:11:01:a4:75:60:84:1c:
22:2a:c1:c8:e0:ef:a7:04:f7:ba:ae:a9:9f:33:73:
f9:b4:27:16:9d:32:f1:c8:86:ef:b2:1e:67:2b:2a:
df:77:05:2c:19:cf:7a:f9:73:61:7a:cd:07:7b:fd:
65:f1:6e:fa:fe:14:4e:86:48:3e:01:40:e2:1c:02:
11:b8:94:ca:10:13:a8:92:4b:5d:89:ba:1d:ad:8f:
e1:81:ac:c0:1c:f1:62:cb:73:9c:65:f1:3e:47:cc:
1a:d1:7e:08:a9:7b:ad:ef:7b:23:3d:7b:c8:c8:58:
6a:61:31:c3:73:37:39:43:37:bd:35:13:cd:05:25:
18:c1:a4:29:dd:95:74:6c:48:2e:53:f6:79:a7:f8:
ee:e2:75:c1:12:56:20:84:98:41:36:5d:0e:28:2b:
d5:24:79:21:93:3e:6d:96:aa:e9:a0:c1:7a:b6:18:
28:4c:47:a8:96:d1:e6:16:65:62:c7:ab:ce:47:0f:
c3:18:73:c5:d5:f4:9d:70:65:11:38:5c:5a:ab:2c:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:41:C3:DF:C8:74:D6:55:4B:EF:2B:E1:17:0D:46:52:36:E0:35
X509v3 Authority Key Identifier:
keyid:8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:67:73:7d:94:0a:dc:8c:c1:6e:3d:f6:ec:2b:d1:0e:15:
b5:1a:f5:e3:05:4c:c3:5a:08:74:34:83:fb:df:ff:85:92:86:
95:ec:29:05:db:62:7d:5e:37:76:f5:f3:f8:16:88:9b:69:83:
d9:aa:38:80:25:66:7a:23:9f:cc:05:be:ce:34:cf:f9:23:cd:
a4:bb:8b:ea:6e:1f:36:f1:c0:95:ea:2d:b0:86:16:8a:6c:a7:
c4:a7:3b:ba:79:79:77:29:b9:36:60:83:ed:d9:2f:4b:72:0a:
0e:ab:50:a3:94:8a:5e:7a:7c:1a:ba:89:4a:bf:31:c6:ed:80:
da:08:21:e7:78:19:e1:15:d3:57:22:16:10:5b:01:bd:f5:72:
69:64:ce:46:e7:8e:fc:ba:a7:b0:ba:6f:24:67:e6:94:77:d5:
ea:55:b6:3b:c8:e8:33:6e:de:35:b5:e3:42:22:60:de:c5:5e:
37:21:18:64:e5:7b:68:36:3e:5d:1b:8f:42:99:f9:e9:7f:c0:
a4:95:1b:7d:07:c8:42:5f:8d:4e:0f:9d:58:7a:53:67:c0:44:
44:e1:51:d6:8e:a1:c2:9c:ba:3d:a6:0f:b4:35:7f:c5:5b:fc:
ab:f9:18:55:56:ff:5c:60:61:21:64:c6:81:fb:54:36:aa:a6:
1c:64:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:51 2025 by rpki-client