Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier: Ed45BJacQv+2QMsVyplvYX6dukpSMXVuubbKxalka18=
Subject key identifier: A0:14:51:AA:90:E0:B8:A0:F4:CE:9E:AC:18:44:1C:49:5C:2B:41:E7
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial: 01984A77C1B2DDDACD00D3E0721E0FD49FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number: 0704
Signing time: Sun 27 Jul 2025 06:00:18 +0000
Manifest this update: Sun 27 Jul 2025 06:00:18 +0000
Manifest next update: Mon 28 Jul 2025 06:00:18 +0000
Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: BBIcSOpqsxcGjj8bblswDbe9iwSXH2TtanWcoXHIidA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c1:b2:dd:da:cd:00:d3:e0:72:1e:0f:d4:9f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Validity
Not Before: Jul 27 06:00:18 2025 GMT
Not After : Jul 28 06:00:18 2025 GMT
Subject: CN=a01451aa90e0b8a0f4ce9eac18441c495c2b41e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:ba:d5:e8:85:4e:ae:a1:01:07:65:0a:7a:
d9:3e:30:43:e8:2d:07:96:92:5f:17:01:14:13:be:
a6:e4:36:9e:ff:c4:45:89:0f:44:08:fd:45:5d:13:
59:68:fe:e3:d8:c0:a2:9b:de:bf:02:a1:6c:4e:df:
3c:19:78:3d:20:aa:7f:62:94:5f:16:aa:67:87:d2:
6c:ac:5c:52:bb:7f:74:1b:8e:6e:ba:82:3e:f2:cd:
0e:61:a3:58:09:fc:c9:35:cb:06:3f:38:51:f2:31:
15:7c:77:88:d6:96:48:45:44:19:97:1d:e8:2d:62:
e3:16:bf:dc:dc:d8:f4:ee:7d:f5:cc:e9:2e:d4:3e:
a5:7e:e6:9f:94:89:fa:b6:c8:74:78:31:78:f0:6f:
5b:32:59:a5:87:bc:8e:c7:84:f0:70:29:64:fc:ad:
69:2b:50:6c:63:b6:8f:fc:bf:5e:fb:ee:c9:c3:ca:
f6:59:3a:da:80:d9:71:35:55:24:da:a3:8e:57:e3:
6a:14:f8:87:70:28:02:1a:5c:b0:80:77:e4:f0:e4:
e9:5c:81:d0:27:d3:79:d0:be:76:8a:d1:23:1e:aa:
fd:5a:fe:e2:47:1a:77:ba:a8:7d:95:bf:0d:74:38:
89:4b:4c:6e:98:20:c1:1e:3f:6d:9d:ff:94:ea:55:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:51:AA:90:E0:B8:A0:F4:CE:9E:AC:18:44:1C:49:5C:2B:41:E7
X509v3 Authority Key Identifier:
keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:47:43:1e:cc:d0:cf:53:5a:ac:23:bd:bf:bd:8a:b3:82:
6d:4c:b6:a2:ac:b1:b3:85:dc:72:97:e7:0e:a4:d3:76:2e:d7:
bb:f2:d2:6c:57:d1:f6:50:92:6c:0b:4f:cf:bf:d1:01:84:48:
48:10:0c:39:d1:de:97:1a:1d:d6:74:7c:11:f0:ee:4e:04:52:
a7:b3:19:07:cb:5d:04:3e:3d:6d:97:40:c0:f3:a6:16:7a:7d:
48:77:55:f0:83:3c:18:fa:b9:be:84:87:eb:3f:b1:4f:2f:fa:
11:c3:9d:55:07:6e:c3:04:80:96:c6:53:a6:09:e7:2e:a5:16:
ef:63:87:f0:49:8c:11:cb:57:15:cf:14:91:b7:41:01:09:0a:
58:eb:3a:7c:6b:84:dd:02:ca:a1:bf:90:3d:55:ee:b3:b7:f6:
a9:5b:42:b5:9e:1a:4b:f8:cd:5b:fd:9e:fd:9a:41:4d:74:32:
17:cc:cb:48:a6:96:db:94:6e:ad:99:60:b0:99:d6:a9:7c:fe:
87:03:69:29:b6:ad:57:ff:24:a8:b0:6d:c1:c1:ea:23:38:b6:
b6:5f:d6:d1:34:99:49:1e:fb:f8:22:ee:a3:e5:68:f2:5f:f7:
b4:49:44:14:21:f6:1b:9d:7b:bf:97:8d:ce:fd:15:28:81:39:
ae:89:fd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:22:28 2025 by rpki-client