Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: ZV7mit3yb7w+WcFrk8Wv75I1GujPFYRRKcizWkjkYT0=
Subject key identifier: C8:9D:FC:19:02:D0:50:CD:4F:E4:EA:CD:B2:56:2B:F0:11:44:19:A9
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 01984AAE96A73BECAAA51FE2771B652B73A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 07BC
Signing time: Sun 27 Jul 2025 07:00:12 +0000
Manifest this update: Sun 27 Jul 2025 07:00:12 +0000
Manifest next update: Mon 28 Jul 2025 07:00:12 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: C54FZEpdYmBkNJOvudTRKK2KzjhGrP6odjeCOwjjW1o=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:96:a7:3b:ec:aa:a5:1f:e2:77:1b:65:2b:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jul 27 07:00:12 2025 GMT
Not After : Jul 28 07:00:12 2025 GMT
Subject: CN=c89dfc1902d050cd4fe4eacdb2562bf0114419a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:d2:03:bb:34:65:0d:25:11:7c:47:f5:a3:
f1:bc:16:eb:cb:a1:5c:77:f5:b2:55:85:82:21:17:
c5:34:6c:4c:6b:88:dd:00:7c:3c:76:17:c3:f0:0c:
ca:d1:02:c0:aa:95:3b:16:cc:68:14:8c:80:d7:d7:
01:d7:c7:28:77:b7:99:d0:66:14:09:4e:7d:86:41:
e4:8a:3a:a2:9b:92:6f:4c:6c:53:e6:bf:c4:4e:8d:
b7:ef:4a:5d:d0:20:f3:0d:20:f4:9b:29:a0:ee:9c:
96:dd:52:ae:00:9c:9b:cf:7b:24:a8:25:2a:ac:af:
3b:56:bc:02:84:7a:0b:21:2c:ec:23:3b:58:24:21:
0f:ad:03:9f:8e:b6:bc:6e:49:c6:e3:97:8c:69:ec:
0c:b1:0a:de:19:01:02:c5:22:ef:a3:c6:09:a1:77:
14:40:7f:31:fe:c8:ca:f2:00:a9:85:16:9d:b6:85:
9e:14:a8:a0:5e:cc:e8:09:db:18:8a:69:80:b9:f6:
ef:a1:fe:58:d5:5b:bf:ec:a4:48:ff:a3:3f:14:c8:
c3:51:08:a2:5b:5e:1f:3f:db:03:da:bd:38:d5:ea:
a7:89:a0:bf:4c:f2:01:b0:b4:a0:c9:c3:31:eb:82:
6c:5f:fe:64:b2:d1:fa:b0:52:4a:bc:72:a5:42:40:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:FC:19:02:D0:50:CD:4F:E4:EA:CD:B2:56:2B:F0:11:44:19:A9
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cf:51:fb:35:2d:c4:3b:28:0c:da:00:d1:22:08:98:94:04:
5c:e5:28:60:6a:ea:e0:99:a2:67:2a:48:9e:9a:ba:44:66:0f:
f6:a9:a3:ba:d7:c9:a1:b4:6c:0f:1c:40:2c:e9:a7:00:8e:37:
85:f6:95:1d:eb:db:a8:29:84:9c:93:be:2a:78:00:57:1d:f1:
63:b6:a5:e4:e5:e7:bd:c1:5f:32:c1:10:d5:c7:19:1f:2d:30:
f4:80:37:09:cd:63:20:c5:0a:ae:ed:dd:45:55:30:87:a3:b5:
e1:79:b4:59:bb:b9:a9:0b:47:b7:09:be:4f:36:6b:ac:47:f3:
ee:9b:95:eb:7f:3f:fb:d0:fc:cd:7e:1b:e3:71:c0:20:07:3a:
11:e8:25:2b:2f:2b:94:fb:a0:52:a7:4e:8d:b6:d1:eb:31:06:
80:a9:e4:d9:6a:d3:ac:ba:a7:a2:ca:1d:26:50:b6:5c:64:dc:
37:f1:6c:df:5a:84:f1:0b:41:b6:6c:fa:2f:ec:70:b3:f2:63:
15:00:d6:16:bd:f7:af:37:2e:47:cf:d2:3c:f6:57:7a:af:e2:
6b:58:94:3b:d0:9a:61:7c:94:41:df:97:d4:ab:0c:22:2b:5d:
2b:5f:0a:77:3e:36:06:bd:82:42:71:d5:01:6f:46:dc:8f:d9:
89:1a:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:24 2025 by rpki-client