Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: YIOMVswZKn79s42oc51H4ZnNuwxDfRoioRNoz0ZyE0w=
Subject key identifier: 74:0D:8E:EE:B0:BE:60:47:A8:63:02:5A:B2:87:FA:AD:45:DA:03:01
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 0199228C653BF9914B3BCEC99FBB19BD8C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 03BA
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: 0SKDLRdz5im0iDg0b1b7rcib1j1fuh7Y9f4TdRhBf7k=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:65:3b:f9:91:4b:3b:ce:c9:9f:bb:19:bd:8c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=740d8eeeb0be6047a863025ab287faad45da0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:ee:bd:6d:f4:cc:1f:0b:b7:9e:f2:00:44:
40:ad:fb:0f:a3:83:57:de:ed:f9:0c:f3:24:5e:a2:
52:d5:ef:40:93:10:a2:cc:cd:78:0e:99:1f:24:7f:
ff:96:35:94:8e:89:7c:d1:0e:a8:7b:24:36:e4:c9:
6f:da:83:bd:96:a6:2a:a7:3f:66:1f:d5:b8:b6:cd:
52:54:3d:1a:20:85:f7:e6:6e:1d:3a:85:b6:4a:0f:
ca:43:26:f1:d6:09:df:25:81:dd:fe:40:42:eb:74:
e9:99:3b:bd:da:ea:7c:11:4e:3e:ef:2d:e8:58:6b:
90:0d:05:7d:da:93:da:9f:f7:81:07:72:df:ff:11:
c5:02:26:34:36:2e:91:7a:1a:f4:42:b7:73:2e:17:
22:93:f1:c0:69:4f:a5:ce:eb:41:f3:37:07:c6:29:
ef:62:3c:a8:10:d5:fc:d9:2a:44:9c:9c:89:f2:61:
97:9b:74:c8:4d:01:53:12:0a:ba:4e:b8:59:70:50:
b0:6f:20:0f:20:61:64:ff:09:b5:a5:7f:c6:cc:ff:
e9:29:da:70:fd:13:35:8f:db:f7:11:b7:53:a5:2f:
0e:f1:c0:b1:55:f0:1e:10:9e:f7:4b:fb:6c:69:74:
3b:40:f3:d6:a4:f0:3f:da:fc:3d:ba:70:19:27:61:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:8E:EE:B0:BE:60:47:A8:63:02:5A:B2:87:FA:AD:45:DA:03:01
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3b:94:34:16:89:5f:2a:ef:51:7a:31:5c:8b:0c:8d:9b:03:
4f:1d:76:97:72:2f:cc:7e:46:82:4b:f3:50:0d:72:16:d9:cb:
01:51:ea:a3:c9:e2:92:51:ab:89:fb:df:a5:35:f8:c1:50:26:
65:ac:c4:13:5f:65:f3:e9:f4:3d:4c:36:f0:7d:ed:9a:7e:4a:
d7:85:38:e9:b0:cd:46:16:87:d7:ab:80:0c:69:41:8e:d0:c9:
c9:f8:c7:f7:64:56:89:de:06:ef:a3:0d:f1:ca:de:3f:4f:fc:
99:0b:21:8d:4a:ca:36:1a:c5:a5:5b:e8:a5:eb:69:4c:06:5d:
ec:40:1f:f7:0a:51:e2:20:4e:a4:32:60:2a:b5:25:03:a0:ba:
9b:31:49:14:5a:80:b2:9e:36:6f:43:c5:70:a7:c7:63:0e:61:
15:33:38:a3:e4:53:ce:bd:8a:e2:df:40:a0:00:1b:f0:3b:2e:
18:19:58:24:dd:b4:3e:ab:0b:7f:4f:9c:99:d8:d7:c5:02:79:
ee:16:31:68:47:ef:fc:1a:1e:1c:b4:ec:ed:4b:88:f5:e0:26:
77:ee:b1:ad:c0:6d:21:98:c2:c4:6f:96:3e:a4:a3:eb:a1:1b:
8a:91:b9:38:cf:bb:4e:42:e9:df:71:78:a4:e0:60:e9:80:15:
7e:60:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:29 2025 by rpki-client