
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: Ff6k3ZtqlyGNIh5BZh8vAhAMB020JRHbadV+S1bgrpc=
Subject key identifier: 2A:43:1E:19:BB:6F:96:31:A2:DC:E5:52:BA:01:B1:F3:C1:51:D6:59
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 019921B2485F816516D738ABAF9D893A9D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 14DB
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: /+OXjfegTG1Ixo50WyC8eOXYvHul3a5oYHJ7xVr2hv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:48:5f:81:65:16:d7:38:ab:af:9d:89:3a:9d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=2a431e19bb6f9631a2dce552ba01b1f3c151d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:5a:7d:76:60:74:2e:57:66:cf:8a:b9:a1:
d9:f5:f9:0a:2a:24:18:44:56:0d:0e:ac:3b:fb:9b:
b3:7d:b8:f6:ab:9e:7d:dc:a2:70:70:ed:4c:58:d3:
a5:c7:a9:3b:9b:a2:38:4c:e4:85:56:04:d5:6f:90:
50:df:15:58:c9:d3:cd:b3:65:08:c8:6c:94:17:44:
f2:f6:d4:46:1c:5b:3a:b5:b5:39:ca:62:53:98:2a:
4e:7c:e5:b5:1d:af:d0:70:c4:7c:31:c0:12:9f:0a:
65:63:6b:9f:83:5e:6b:f1:e3:18:3b:f0:bd:a4:60:
c7:34:a6:72:85:b0:81:28:62:8d:b7:26:fe:33:71:
63:08:bd:65:14:8c:42:e3:ca:4d:4e:67:25:5f:9b:
8d:6d:f9:6a:5e:ea:83:a2:ea:35:03:77:0d:2e:86:
ca:73:d9:52:68:bc:9e:e7:f4:dc:bb:cb:5d:39:d9:
d7:79:26:03:67:6a:de:53:2c:8e:56:02:7a:3b:4d:
0e:19:bb:73:b7:b3:c4:bf:8d:c0:20:0b:b6:11:84:
43:75:46:69:58:be:80:f5:9f:33:5e:c2:41:9c:a2:
52:91:aa:ee:ce:db:52:56:16:ea:4e:bb:05:bc:93:
e9:14:19:e7:35:bf:31:c2:18:aa:8e:8a:69:c9:ae:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:1E:19:BB:6F:96:31:A2:DC:E5:52:BA:01:B1:F3:C1:51:D6:59
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:a1:01:e4:7a:87:bd:f8:60:58:41:5b:82:48:5f:a1:c2:
a9:24:a0:de:a1:07:0f:b9:ac:c9:e6:a7:3a:f6:99:54:47:5f:
ed:6a:5a:7f:9e:6b:0b:91:8e:1a:79:33:78:f0:7e:04:68:7b:
53:f7:83:d6:c9:68:6e:bd:8c:b2:7f:b3:89:87:43:d1:be:fd:
e2:88:81:71:3e:3a:83:04:f9:81:b3:c2:f2:10:ee:38:42:29:
81:ea:a5:eb:e4:15:d3:ee:d0:16:a0:85:21:29:4f:73:ba:7f:
f5:d2:2a:b5:85:f0:06:50:16:6a:f5:35:5f:4a:b1:df:18:ed:
ed:a8:c4:2d:cc:53:bf:ad:b2:20:2a:99:82:4f:53:d8:a0:a7:
c5:43:cb:76:7c:31:fe:64:8b:84:ba:8c:bb:5b:18:d2:a8:98:
09:d9:8d:2d:40:a3:61:e1:ff:a7:55:90:b6:13:06:5d:20:13:
3a:bb:e3:96:d4:46:26:a3:d6:a1:e3:b9:b3:16:ff:7a:b3:44:
e0:b6:18:80:b6:6a:06:e7:19:24:49:bf:02:83:78:4e:af:c8:
88:9c:51:fe:4b:2a:4d:e0:e8:22:4e:b8:d0:f8:c1:99:e3:37:
6c:08:08:f0:08:d9:4c:b2:b5:68:10:8a:3c:d6:0e:c1:8e:24:
8c:a4:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:14 2025 by rpki-client