Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: 8jdHG4fnfCONTOzNyVJ0RRU/M6Dezqa+1bpGBOcVj0U=
Subject key identifier: 87:33:E4:05:80:26:B7:D6:14:43:88:9C:E0:9B:A8:D5:A7:36:A8:70
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0199180A290351D2EDCE5B04E62FE0C8C3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 09C4
Signing time: Fri 05 Sep 2025 04:02:23 +0000
Manifest this update: Fri 05 Sep 2025 04:02:23 +0000
Manifest next update: Sat 06 Sep 2025 04:02:23 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: MUns/cm6FU/jfxaOmZsjFHg5WJCdRhTHCyAiOIWmTfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:29:03:51:d2:ed:ce:5b:04:e6:2f:e0:c8:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Sep 5 04:02:23 2025 GMT
Not After : Sep 6 04:02:23 2025 GMT
Subject: CN=8733e4058026b7d61443889ce09ba8d5a736a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:b6:2f:8b:7f:12:dc:7d:50:94:69:b3:da:
dd:32:cc:93:08:78:9f:54:58:45:7c:ae:63:46:a0:
5d:99:c4:ca:dc:36:0b:9f:ff:b0:d5:6a:72:50:ee:
7f:e4:09:e8:0c:33:85:03:e8:9b:3f:74:2c:ed:71:
a3:ce:f9:a4:45:cd:9e:f9:ac:a0:a0:36:15:ba:26:
71:21:44:79:2d:13:a7:7d:82:84:79:18:ec:f9:0e:
34:69:a3:08:50:8b:63:40:0a:9b:5d:aa:c4:7f:3c:
5e:cb:d4:8f:67:c1:b9:f8:6e:11:29:9e:b2:6f:b1:
23:02:ce:9e:a0:a3:25:21:af:10:c3:fe:8a:53:9a:
b0:2d:a1:6c:cf:53:93:52:8d:65:01:c5:89:33:af:
7e:4e:a9:84:27:88:eb:6e:66:cd:f2:4d:b0:57:2b:
e2:7d:e0:c0:25:27:03:a3:64:2d:8e:42:40:59:89:
27:ce:37:d7:31:8e:1d:32:55:90:7e:a1:8f:62:6e:
f7:7e:dd:e2:d8:0a:6d:77:9b:43:a3:18:16:15:cd:
48:60:e6:81:41:53:a8:26:5f:16:dc:93:5a:03:a0:
41:2e:ae:84:01:d2:ef:e5:3b:35:47:f4:ae:da:ad:
66:80:3f:18:e3:96:d3:6c:08:9d:e0:3d:aa:3c:73:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:E4:05:80:26:B7:D6:14:43:88:9C:E0:9B:A8:D5:A7:36:A8:70
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:39:58:ed:f2:28:af:6c:db:cc:79:76:2d:0a:81:3c:4a:18:
53:bf:fc:59:9a:3a:20:b2:cd:86:72:8b:9f:91:73:cd:09:3f:
eb:f8:05:77:38:cf:aa:4c:15:b5:27:06:75:1d:f7:36:5c:92:
28:83:f2:c3:76:85:93:c9:41:3b:6b:21:04:d1:ec:20:59:8c:
19:a8:ef:7a:24:e3:c9:03:83:f0:a6:0b:8e:ed:85:4c:a7:d9:
b2:44:79:8b:1e:b1:05:d9:80:8c:8b:02:00:89:b9:4c:75:f0:
9c:2d:8a:77:dd:48:44:89:a1:c9:a7:f1:2c:64:28:6c:16:3e:
64:7b:e0:f1:d2:a7:bc:f7:e5:7b:79:1b:14:ca:4b:89:c9:8b:
00:b3:dd:6e:8b:5e:ae:5b:53:55:75:57:3a:99:43:f2:be:12:
a1:90:d1:48:11:b4:3a:f0:62:2b:ec:d5:e2:1f:c0:86:02:e6:
9f:bf:8d:6e:31:f2:d2:36:f2:6a:ee:9d:e7:e6:a9:84:5c:ea:
c9:99:67:20:9c:b9:60:c5:c9:0e:55:6f:59:30:03:92:b4:5f:
76:3a:ce:09:d2:c4:10:cf:41:fe:47:77:c5:aa:2e:5d:ef:bb:
9b:c0:6f:67:39:70:d5:39:3c:fa:16:84:a9:f6:35:f4:f6:c5:
11:b4:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:54 2025 by rpki-client