Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: TKR+ebzgGVjgmKw8SyBD6tn+APYGm3cjQis7CPD1V7Y=
Subject key identifier: AA:22:7B:DF:52:F4:6F:EB:4B:79:F6:40:DF:CD:3F:D7:2A:A5:D2:94
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 019A725CC2608226580AD68EEBE115CD30D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 035C
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: i/1MeOGhn69YzSGNtl+kl+B6/MbNWjnEyKr2kgnjuvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c2:60:82:26:58:0a:d6:8e:eb:e1:15:cd:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=aa227bdf52f46feb4b79f640dfcd3fd72aa5d294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:f2:8b:af:0c:b4:e4:83:15:91:e4:9a:36:
60:c7:8f:f2:94:c5:14:36:b0:93:25:28:0a:21:5d:
af:67:45:d1:ca:34:c6:68:8b:3d:72:00:b4:ed:45:
89:55:78:dd:85:d2:5c:8f:53:7b:36:e9:d8:d4:d1:
7b:d4:5c:60:15:b6:b8:25:1f:b1:7b:97:bb:af:be:
bb:45:2a:94:d4:8f:60:67:63:e3:fe:4c:1d:8c:d1:
41:7d:5a:9c:f2:20:84:96:a4:f6:c2:ee:c1:ce:f4:
72:ea:c8:0d:fd:6f:10:b6:b4:76:17:89:39:1e:b8:
79:83:27:62:6a:f5:d4:95:e8:62:17:f9:50:67:fa:
47:0c:bb:94:28:80:55:93:0c:cf:b0:2b:fd:19:0d:
4f:85:4f:68:05:5d:0a:f4:3f:4a:0f:5e:74:33:ac:
b0:8c:01:4f:48:c2:cf:c0:fe:09:1f:c6:0d:93:6e:
7c:eb:79:9b:ee:e0:fd:89:0a:44:55:01:2d:af:59:
df:48:2f:e8:d8:77:f4:57:e2:83:18:bc:6a:63:1e:
5b:60:a3:ae:30:7b:11:55:71:15:63:ab:e5:b1:69:
d5:cc:bc:65:4d:cd:86:92:1d:8d:10:b7:c6:5f:56:
96:ed:dc:b7:31:66:1d:e4:a3:ce:3d:95:a9:96:97:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:7B:DF:52:F4:6F:EB:4B:79:F6:40:DF:CD:3F:D7:2A:A5:D2:94
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:7a:10:d0:38:ae:4d:a2:80:18:cc:ea:2c:4a:29:10:09:
ad:9a:37:7d:66:1f:de:21:d9:5b:83:d9:6b:7a:c5:27:8c:49:
df:f7:54:11:04:f3:5a:6c:fc:93:ab:b5:4c:75:54:7c:df:21:
84:ea:38:d5:97:53:ad:98:93:ce:20:fa:16:c0:a3:d4:ad:45:
38:c7:5d:d2:a3:26:51:ef:52:6e:e6:48:74:87:ef:49:da:57:
4e:7a:43:48:da:e5:28:2c:5f:2b:e0:7b:e2:72:40:78:4f:bb:
4d:92:19:f5:66:7d:bb:de:c1:c2:74:3a:a4:f2:20:d5:43:cc:
bc:e1:29:e4:74:3c:56:3d:07:79:cc:f6:53:97:13:87:b3:4f:
a0:7f:3c:1b:d6:47:58:60:a9:b4:4a:14:05:38:c2:93:b1:6e:
30:87:81:d9:e3:d0:13:7a:81:77:53:6a:a7:62:02:e9:ba:cb:
86:5d:f3:aa:d3:aa:7c:18:84:b9:a3:07:38:eb:55:e7:96:70:
cf:14:f9:e2:ca:f6:60:9f:c2:49:5a:6c:df:96:31:66:20:c0:
e8:11:fe:11:9b:50:3e:57:87:e5:97:e8:75:c7:b6:4f:91:e0:
bb:4f:b7:7d:89:c6:e7:69:df:3c:92:5e:4c:ea:ef:90:d7:55:
58:54:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:40 2025 by rpki-client