Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: Jk9bfWGFabAnxODL82occjfbMxQQquiXUw5FZFkyvM8=
Subject key identifier: 5A:02:63:D8:95:37:62:B3:FA:6D:37:AF:BF:70:AD:20:9A:66:A8:39
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 0197CACC226FE6F1A1A02B0421969B600F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 0308
Signing time: Wed 02 Jul 2025 11:01:05 +0000
Manifest this update: Wed 02 Jul 2025 11:01:05 +0000
Manifest next update: Thu 03 Jul 2025 11:01:05 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: SYTVlMSvlYx/YN3HRbtnvQMLk4oJ45DuuiT2ivCJ2Ik=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:22:6f:e6:f1:a1:a0:2b:04:21:96:9b:60:0f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Jul 2 11:01:05 2025 GMT
Not After : Jul 3 11:01:05 2025 GMT
Subject: CN=5a0263d8953762b3fa6d37afbf70ad209a66a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:d8:a3:8b:03:8e:af:5e:e9:c9:fd:fc:71:
c5:48:d3:f5:2f:74:d8:98:10:59:4d:d4:c1:d2:8f:
40:e7:87:d1:12:e9:8b:35:5f:74:58:33:f5:5f:a2:
fa:86:84:9a:f9:19:53:f7:0f:95:aa:4d:00:2f:ab:
02:67:65:13:4d:57:e1:54:97:3f:36:81:d1:26:73:
ed:e2:35:c0:8b:ee:c4:d8:57:71:d2:11:46:e3:12:
df:65:5e:93:16:ee:a4:c3:15:f4:a7:59:d1:9b:d0:
b0:94:71:25:70:9a:41:2e:49:d4:b0:9c:b7:b5:cc:
6c:ab:87:d5:76:63:21:97:d8:c2:54:24:1a:a7:56:
37:dd:31:48:a8:be:22:45:c4:49:34:d6:6e:e8:21:
ef:e2:3c:26:58:c9:22:d9:22:06:f7:38:4c:71:fb:
1f:84:e2:a1:98:2f:24:ca:0f:24:a2:f8:b9:ed:29:
9c:10:4c:ef:e6:a8:51:91:0e:91:d3:a4:1b:87:68:
9d:6b:2e:d2:0e:7b:4d:92:5a:46:17:51:3d:6a:8e:
99:ed:64:e4:be:c9:64:cf:95:6d:84:70:1a:e4:be:
9d:e5:45:7c:56:bc:35:d6:9d:c3:6d:93:1a:24:2d:
16:c2:87:a0:91:b8:8e:08:1e:60:5c:32:54:0c:32:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:63:D8:95:37:62:B3:FA:6D:37:AF:BF:70:AD:20:9A:66:A8:39
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:88:bb:b6:fb:16:1c:cd:63:4e:52:a3:e3:5a:a0:2d:dd:
e9:86:e5:cd:c7:c8:5d:58:ea:06:25:e3:45:ca:37:3a:45:e9:
ba:48:ac:bc:a7:40:ac:41:0f:be:49:8e:88:e4:26:75:77:12:
4c:64:16:d8:7b:33:da:70:1e:8d:a1:48:62:ab:77:7a:2e:87:
35:cf:36:cc:f2:bd:53:08:c4:07:3b:7c:10:9f:ec:f4:84:45:
d8:a3:82:f6:45:e9:53:f6:cd:c5:ec:38:65:72:ba:db:04:d2:
7d:ec:77:4c:81:8e:be:c7:53:1e:01:fb:04:91:30:24:e6:f6:
f7:ba:40:fd:0a:f8:05:88:52:65:68:65:03:42:f5:3d:a5:ec:
a5:0e:9e:3e:00:b6:b1:1d:04:16:e3:32:d5:59:96:2c:3e:1f:
18:92:07:65:d6:35:df:0b:3f:40:64:1e:f7:1a:2c:42:6c:04:
24:93:9a:8a:cc:3a:af:b5:8e:8c:fc:08:c6:77:f7:d4:4f:86:
29:c5:f8:7a:8e:7e:27:77:a9:09:c1:9c:d5:77:24:9d:21:95:
5a:98:31:a8:8b:e0:5d:68:22:c3:92:64:9c:1c:aa:0b:1c:85:
51:ad:5a:cd:00:5e:22:fb:eb:3f:9a:86:42:96:84:4b:25:cc:
cb:5f:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:14:17 2025 by rpki-client