Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: 6Jgqmnr4M6d1ci/D3fNXqo7zX07yhS2BGxpvxK9Ehgo=
Subject key identifier: DB:3E:68:05:96:58:5B:17:8D:1E:9F:20:88:5C:07:94:D3:98:D2:83
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019922C36F3B8ACD335BB1747C5B9A3F508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 06:00:57 +0000
Manifest this update: Sun 07 Sep 2025 06:00:57 +0000
Manifest next update: Mon 08 Sep 2025 06:00:57 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: CerAgYs/Ghu0Rv499d+LFKPnopIm69KGgLveeNZRfGw=)
2: rDEmrMM95SkqxkB8l_GRLopLAJU.roa (hash: ED7EnqJpzioTMb1iFori/SMlNofClBdI83/52l8DPvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6f:3b:8a:cd:33:5b:b1:74:7c:5b:9a:3f:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Sep 7 06:00:57 2025 GMT
Not After : Sep 8 06:00:57 2025 GMT
Subject: CN=db3e680596585b178d1e9f20885c0794d398d283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:ed:53:60:2c:df:89:a7:bf:4d:f7:1b:4f:
e9:5a:a7:58:ba:43:6f:63:c7:38:cf:e3:e6:61:f3:
d9:91:22:95:d7:93:95:d5:2c:9d:6b:90:8d:ca:74:
76:f5:b1:d8:b0:9a:97:44:49:75:79:b6:51:72:c6:
21:39:b1:26:df:4f:ce:be:cf:df:4a:76:11:5a:ff:
38:e4:17:ca:84:19:b9:01:5d:8c:83:2a:3b:dd:60:
f9:f4:87:fc:fc:25:b7:8f:3b:99:4a:36:e0:c4:e3:
4b:1a:9e:88:ca:ba:f9:c5:6a:0a:a6:8c:6d:0e:01:
69:3e:fa:b9:2f:86:2b:e3:68:ab:b3:e4:c9:e8:d3:
f2:96:c0:8e:f7:89:41:8d:d7:c1:fe:22:b3:32:9d:
f5:2f:82:ae:05:0a:f9:95:b0:fe:1e:42:0e:38:ee:
52:17:78:09:4f:23:2c:e7:39:30:b4:18:82:4d:e0:
65:56:cc:5a:4f:5b:91:0e:f1:17:58:01:02:df:5f:
5b:0c:04:75:7e:49:69:8a:e0:ba:0d:82:df:4a:40:
74:d2:c5:d8:82:ec:60:42:78:22:89:ea:a7:bf:4d:
7d:3d:40:3a:e3:54:bf:a5:0e:f2:62:b2:8d:c1:5b:
9b:91:a5:1b:38:be:7c:2b:cb:6f:f6:cf:f9:ed:90:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:68:05:96:58:5B:17:8D:1E:9F:20:88:5C:07:94:D3:98:D2:83
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:7b:ab:ed:27:98:5d:f0:a7:9f:37:86:78:57:d2:07:e7:
0e:a3:62:e0:f9:04:5b:e7:0b:68:b4:4d:ad:17:a2:c3:cb:7a:
ac:b5:4b:5b:36:4a:72:05:43:7d:99:9f:1d:ee:f4:e7:65:55:
a3:4c:0a:3d:33:8a:45:0c:c3:2d:03:a7:00:58:b8:80:dd:a6:
61:7f:0a:af:4d:2b:e0:d6:0e:4b:b0:8f:7c:2b:bc:88:fc:25:
5f:a2:5f:83:7e:6e:51:5e:b6:1b:99:57:3c:92:88:84:17:6a:
6f:50:03:7e:aa:8b:f3:03:c1:b1:3b:15:20:15:d2:17:3a:84:
f5:1b:af:0c:34:51:50:13:e7:4d:0d:03:c7:f1:4a:b1:8f:63:
4c:8d:f1:c6:07:59:7b:43:ce:24:a0:2d:4e:bd:66:c4:05:1f:
47:1b:a8:53:82:66:8e:a5:e4:05:21:5b:34:34:fc:a2:64:41:
c1:ae:a8:c6:e6:ef:3d:2a:dc:c1:71:6b:b9:5b:b7:bc:bc:91:
ec:4f:31:98:cd:83:35:9c:0a:cf:44:e2:6c:5f:13:13:55:2d:
de:1f:22:bf:36:91:60:b7:05:21:dd:9d:b4:b3:76:14:36:89:
41:06:02:2e:aa:08:0b:2b:52:03:c7:22:01:aa:7c:a1:9b:4e:
68:24:4f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:50 2025 by rpki-client