Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: 4uIVU8PYnh3NouNYOVUD7qPHvbksiqllOHCgkn/ofM0=
Subject key identifier: 87:5E:AA:6A:36:17:EA:C2:23:C5:12:74:20:76:19:04:AF:BF:90:8E
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 019923A03AEE7C21134628618655B55B6A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:07 +0000
Manifest this update: Sun 07 Sep 2025 10:02:07 +0000
Manifest next update: Mon 08 Sep 2025 10:02:07 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: 0O5ppjBJNfKrAux52UCO5vnbssgIWGJWStiPSv5MpC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:3a:ee:7c:21:13:46:28:61:86:55:b5:5b:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Sep 7 10:02:07 2025 GMT
Not After : Sep 8 10:02:07 2025 GMT
Subject: CN=875eaa6a3617eac223c5127420761904afbf908e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:c2:0a:3b:d8:79:b8:45:1b:23:b3:26:12:
9e:2a:db:1a:8d:69:db:96:87:bd:0d:f8:e1:d6:54:
21:35:f7:7d:61:e3:7b:84:c8:ff:2e:6b:d2:38:87:
6c:9f:59:42:24:93:fd:6c:22:57:bf:d2:a1:6e:8f:
9b:64:28:04:c8:5e:e7:c3:c9:6c:11:2e:5f:eb:b2:
af:72:42:55:96:2f:47:a2:2e:0e:39:58:63:df:d6:
72:ea:04:dd:78:cd:c9:f9:4f:c2:37:e0:1f:12:30:
8b:9f:86:53:8a:d3:e6:69:e8:92:6c:3e:a1:98:d5:
11:d7:4b:50:b7:1f:4d:11:e5:82:a6:c5:39:7e:e4:
75:08:cf:47:2c:16:f9:63:75:e5:0b:90:c7:5a:bb:
1e:f0:cf:d3:74:64:c2:13:02:34:ed:a6:1e:df:43:
8b:b6:46:74:c4:24:36:a3:07:72:df:06:5e:b2:68:
2a:a8:28:a6:fa:0e:fa:6c:8c:df:59:16:16:97:32:
bb:c9:9d:50:99:89:cd:57:58:b2:da:9c:b7:a0:98:
97:ae:dc:8d:11:69:d5:c9:81:da:7c:43:3f:40:40:
42:a4:3d:22:52:15:8e:06:5b:eb:6f:b5:4c:28:46:
42:0e:1b:41:c9:e4:ac:fa:d6:52:76:d9:be:f1:70:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:AA:6A:36:17:EA:C2:23:C5:12:74:20:76:19:04:AF:BF:90:8E
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:ae:0e:f4:5e:9f:bb:ac:f7:5c:0d:12:e7:f5:ca:00:c4:
ba:96:c8:67:ff:58:ad:1c:37:8d:a9:9e:2a:0e:c2:24:cb:aa:
29:82:46:04:46:26:97:9c:19:84:d6:14:ad:d1:46:73:21:8c:
9d:35:d0:3c:2e:39:e5:52:86:38:f0:aa:c2:1f:9e:ee:df:59:
8c:ab:fa:de:90:17:34:50:e5:22:ea:fb:1b:72:20:16:72:be:
1d:f5:9a:4d:6c:79:f8:da:2e:75:0a:ec:06:fd:63:2b:93:91:
46:45:cd:b6:fa:13:b9:cb:db:e1:79:d5:ae:2f:70:33:e7:1f:
50:92:a0:e1:5d:21:09:ba:66:36:b3:e9:b9:60:79:26:4e:88:
0a:71:7c:c2:0a:f6:67:47:b4:ae:27:ec:0e:60:9e:9e:81:9d:
37:25:7d:31:fc:bc:c5:2c:f0:8a:98:c5:96:38:12:b6:46:c8:
2f:57:80:91:89:58:34:03:67:06:ad:b5:8f:cb:e8:74:9b:1a:
23:b4:e2:47:e6:48:51:fa:92:f2:66:c3:53:48:eb:58:9f:f7:
64:27:42:32:1d:9a:7e:0b:fe:f1:f0:32:c9:05:cb:d2:60:d2:
17:ff:8d:d0:9e:94:0e:81:9d:1c:9f:6e:2f:cc:42:e9:77:0f:
b1:c4:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:00 2025 by rpki-client