Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: v008yewmxxEV6MAENKYqcrXTurmRGENRKF9Rck3v+xE=
Subject key identifier: F4:F0:EF:45:3F:E2:60:37:9C:F8:D7:13:E3:A8:54:BB:4F:C3:8F:C7
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 01984AAEA9C1162034362AC6F5A132C22C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 092E
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: 2UVSbiIfEiS0boRtkiWQJjhwgB5a7AHZXZYTJ2x8z+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a9:c1:16:20:34:36:2a:c6:f5:a1:32:c2:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=f4f0ef453fe260379cf8d713e3a854bb4fc38fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:3f:10:d9:6e:a2:0a:c6:82:62:ab:ad:c2:
61:10:3d:8c:ef:59:f2:68:ab:b1:62:48:a0:cb:68:
ee:ca:48:6c:37:27:3b:06:a8:49:b9:bc:21:a9:97:
84:eb:65:e7:f5:08:a4:c4:3f:66:a5:1e:69:54:ae:
04:6c:d4:2b:00:aa:b0:15:01:58:59:10:a1:b4:5b:
df:f3:5a:66:93:ad:5c:95:25:de:c1:7e:61:c5:26:
b4:39:e9:1f:2c:ac:8d:32:c3:75:6c:65:9a:2e:39:
64:5c:71:3a:93:75:96:48:f4:22:bd:eb:fb:af:0e:
35:90:9a:f8:aa:28:26:fd:31:67:cb:93:bf:6e:32:
75:27:db:18:c5:4a:8c:41:1f:a0:99:c5:42:88:d5:
fa:16:8d:0b:28:79:71:c0:79:98:ff:6f:bd:9a:5a:
a0:5b:4f:6d:c8:b8:ae:35:76:23:18:48:17:ae:2d:
e7:e3:c5:80:46:69:ec:8c:be:81:da:2e:c4:99:7c:
d0:a7:5d:2d:5a:b7:c2:15:ef:56:c2:15:e0:bb:46:
a3:12:e6:c1:d6:7e:07:d5:f6:b1:fe:42:e8:6a:b6:
1f:68:ae:01:cc:a2:2c:9b:50:7f:17:cc:9f:f7:81:
9a:0b:fd:29:f6:5d:1d:83:20:e1:4e:c3:1d:c3:57:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:EF:45:3F:E2:60:37:9C:F8:D7:13:E3:A8:54:BB:4F:C3:8F:C7
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:40:b9:38:a8:5a:e2:a7:ea:6e:5f:69:43:a5:f0:10:3b:
80:a4:03:a6:09:8d:f1:9a:81:a7:d5:2c:46:25:c4:c8:56:0e:
df:4d:39:b0:34:52:66:e0:8f:4f:fe:65:f1:3b:f8:ca:61:f4:
1c:b2:ba:b5:5e:29:1b:3a:1f:ed:6b:93:83:d4:23:ba:9b:d2:
39:b8:46:27:c2:89:bb:17:6e:dd:eb:4b:98:44:24:c5:ee:21:
5a:e5:e3:69:e4:fb:67:67:d9:34:a7:c8:4d:b9:67:10:67:99:
4b:8f:ac:8d:f5:2f:a9:18:ed:89:75:cb:a1:4e:8a:00:28:6b:
78:12:9b:cb:20:46:f6:f0:77:55:ce:22:20:2b:a6:dc:c7:10:
a9:b6:73:bb:4c:da:42:d9:a7:0d:f7:a2:2a:f2:61:e3:a4:1c:
d6:4c:49:0c:25:4c:2e:2e:a8:7d:da:fc:6b:92:a7:47:ed:1f:
79:42:06:39:b3:34:53:da:76:05:eb:d8:47:8a:db:ad:ca:1d:
5d:14:e3:e6:35:a6:72:42:d5:ab:c6:6d:53:73:b0:b1:3e:20:
c2:0c:83:6a:f5:d1:25:73:14:6f:c2:7b:10:81:73:1c:0f:14:
ec:96:36:11:fa:3d:93:4d:64:f7:60:39:ad:07:37:22:4d:d1:
26:02:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:34:40 2025 by rpki-client