Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: wuRrbQtbKo51jH13nX3oNXieJESlnxXMJlM+pzo6BfE=
Subject key identifier: 21:78:6B:28:88:68:A2:41:C7:8F:4B:5E:60:5E:A7:A8:8C:EF:4E:CD
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0198C6ECF94E74BC9AC90011E3F56451A3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 08CD
Signing time: Wed 20 Aug 2025 10:01:15 +0000
Manifest this update: Wed 20 Aug 2025 10:01:15 +0000
Manifest next update: Thu 21 Aug 2025 10:01:15 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: sG9MVmOHnumfgF3oNZSCk10XxJsROQAqwA1GZ3l2wEk=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ec:f9:4e:74:bc:9a:c9:00:11:e3:f5:64:51:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Aug 20 10:01:15 2025 GMT
Not After : Aug 21 10:01:15 2025 GMT
Subject: CN=21786b288868a241c78f4b5e605ea7a88cef4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:bd:e6:b3:be:ce:49:85:60:fa:28:51:a7:
a3:b1:38:54:04:4a:81:52:00:7b:43:c6:e5:da:7b:
2f:c7:c1:9f:6c:fc:6d:4e:a0:2d:d5:9c:4e:ea:64:
93:a7:8e:11:21:b2:d1:87:2b:70:0d:5b:6a:c9:8f:
6a:a4:2a:5b:68:e7:5b:81:72:b1:6b:fd:a5:86:79:
fd:4b:e4:ce:d3:8b:2b:e7:08:18:46:50:c7:ef:e6:
de:dd:94:ed:ab:7c:8a:88:b0:36:7b:bf:78:d6:ab:
70:10:86:ab:51:95:68:b1:24:d7:7f:13:e8:06:5a:
b2:70:9c:8b:a3:c8:2b:bd:83:cf:18:b7:0d:3a:1f:
b8:ae:b8:28:13:13:a4:38:98:3d:2e:c4:74:a3:89:
42:90:d7:1c:c6:f4:12:0f:a7:4b:b4:0e:fc:e9:38:
82:52:4e:00:ce:9c:e0:ca:43:f8:d9:19:5d:ee:24:
aa:81:a7:05:17:ac:72:1c:aa:10:29:74:36:ba:f8:
62:8b:57:d0:d3:31:7b:27:cf:de:13:8f:ef:ed:4f:
e3:53:56:2a:44:a8:80:f4:32:41:00:85:c0:6c:9f:
0c:da:5a:2a:89:1f:36:1f:0b:09:d1:30:e2:a7:fc:
74:2d:64:7d:56:30:49:ff:35:95:19:7a:b4:45:ce:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:6B:28:88:68:A2:41:C7:8F:4B:5E:60:5E:A7:A8:8C:EF:4E:CD
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:df:e1:7b:46:25:1b:f4:5c:30:a6:9e:62:3f:8d:ba:96:
31:06:ef:51:fd:53:a0:41:9b:80:2e:8b:2d:62:21:9b:c6:7f:
e0:d5:2e:56:70:9f:c1:86:7b:6c:5c:3e:43:bb:24:0c:a8:a2:
e5:89:33:38:13:24:19:f7:0c:bc:70:c6:1b:c0:4b:ec:50:53:
57:3a:f0:83:e2:57:37:9f:2b:12:37:a6:5f:0e:55:bb:d9:ec:
8f:42:85:73:5d:9e:23:51:99:14:71:7d:9a:74:80:ec:50:1a:
d7:8c:ec:65:83:98:02:ec:a1:b0:c4:2f:26:07:96:c8:5d:f5:
7d:7a:8a:74:be:56:f8:24:c9:89:d7:93:1b:59:62:61:80:98:
82:07:ce:ec:63:58:e1:03:0e:47:10:08:f9:4d:f1:f4:78:8b:
7b:9a:57:9d:6b:3c:a1:1e:e8:9f:69:40:26:6f:87:7d:76:48:
60:40:4b:63:d5:38:b6:21:b8:5a:36:f5:c6:e3:8f:38:7c:8f:
fe:d2:b6:44:f6:a8:bd:4b:17:1a:94:71:c3:f8:47:3f:77:00:
d4:c1:b8:e4:d5:7c:cf:d0:0d:dd:9b:de:4a:1f:81:41:7f:df:
2b:ee:f7:fe:2d:4c:92:80:e0:f3:58:55:ce:3d:bc:37:49:ab:
c2:fe:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:00 2025 by rpki-client