Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: LT3ydGR9FuLhse9BCufibJXFLcX7WnDAcITvDqIfwGA=
Subject key identifier: D4:94:34:1F:31:E5:2B:8C:28:0C:6F:FB:7C:86:8E:F1:FC:C4:E8:F1
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019922557FCA6E574096FE64002CF21EA84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: tvdKRPeq8O141guGjQq951l6tFc3q2yLRjO4tKZcQY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7f:ca:6e:57:40:96:fe:64:00:2c:f2:1e:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=d494341f31e52b8c280c6ffb7c868ef1fcc4e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b9:d7:cc:96:91:e9:3d:04:64:9e:84:0c:ad:
5a:a5:29:1b:c6:b8:7f:64:58:83:3c:b3:61:53:ce:
13:37:9d:8a:eb:b8:a9:3c:03:2f:76:6b:39:97:69:
5f:68:86:43:6c:9b:f2:d2:3d:c1:da:80:5e:a2:be:
0b:e8:b3:a7:59:f3:d8:50:e5:c5:a4:c6:04:99:63:
09:a9:68:7c:d9:94:33:c7:b9:91:6f:a8:c9:4c:3f:
a5:5e:6e:2b:73:7a:40:5d:87:26:93:61:79:0c:e9:
4d:c4:a3:ec:24:eb:29:34:c7:5f:48:d2:bd:74:6c:
f1:4f:56:c6:26:5c:90:2c:ea:64:12:a6:0a:16:14:
8e:bd:9c:5e:e5:9f:d9:6b:10:24:bd:f4:a9:58:12:
da:eb:c4:40:e4:00:bc:22:8b:d6:6a:f0:8b:63:0f:
1a:a7:65:a8:0e:cb:1a:8b:c4:df:44:56:06:cb:92:
8c:4c:e2:5e:08:00:ef:ed:1a:a8:40:65:82:50:7a:
60:34:f8:8b:85:04:6a:cf:88:30:6a:84:37:d9:74:
fb:0a:0c:fd:55:a3:cd:fa:95:58:ed:89:69:ab:3c:
24:61:ef:2b:4a:f2:01:50:b9:81:aa:15:d2:10:78:
d0:29:60:19:54:26:31:2a:26:d0:6d:42:f5:b6:e8:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:34:1F:31:E5:2B:8C:28:0C:6F:FB:7C:86:8E:F1:FC:C4:E8:F1
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b6:cf:c0:e8:59:ef:ab:ee:e4:17:f0:29:a7:6c:45:92:3c:
94:56:dc:7d:9e:45:d0:0b:4f:24:87:7d:46:04:ea:1d:13:02:
a3:4a:44:e2:0f:0b:81:a7:18:10:eb:c0:26:a3:86:d2:3c:83:
6a:a7:3b:00:db:62:20:87:d3:8f:88:aa:68:66:4e:52:06:6d:
f3:bf:6a:e6:f3:65:84:e8:eb:68:e9:0b:2d:fd:dd:f7:a1:91:
b8:d1:3d:90:80:4e:f7:e7:a5:19:14:ca:19:66:df:7e:1d:ec:
e8:7f:78:05:da:ac:29:9b:9a:79:6d:bb:07:17:f6:24:c2:06:
13:52:3c:3b:9f:5d:be:5b:9a:c4:27:af:bd:7d:0f:6a:db:cb:
99:ac:ce:ce:93:77:c1:ab:9b:9f:0d:75:ae:b6:ef:dd:93:4a:
b9:94:7e:1f:b0:61:5d:79:7d:a3:59:c1:d9:3f:a6:f2:bf:f6:
13:fa:6c:80:6c:3d:75:cf:19:d8:09:34:78:ae:19:24:9b:36:
0d:5e:7f:d4:5d:6b:46:cf:b0:50:ee:2f:12:c3:fe:41:81:dc:
bf:28:e2:aa:38:1a:a5:9d:60:9f:8f:82:ed:58:d8:88:e3:67:
e9:c8:df:31:ae:31:e9:fc:39:01:63:3a:9b:aa:0e:db:55:54:
49:e2:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client