
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: HwNqO22dtNv8/nTzdpGzf8Qap6IuMSTTY0Jy0HpKl0Y=
Subject key identifier: 2B:62:06:DC:2C:DE:1B:D3:FB:89:67:5A:D5:52:2C:24:FE:95:4F:6E
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0199221F195D7ACCD254A153472FC3323B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:27 +0000
Manifest this update: Sun 07 Sep 2025 03:01:27 +0000
Manifest next update: Mon 08 Sep 2025 03:01:27 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: tVX1JGme1q1z7Wq0wc/f/rhzz1P7GpHTSfrlezZUOG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:19:5d:7a:cc:d2:54:a1:53:47:2f:c3:32:3b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Sep 7 03:01:27 2025 GMT
Not After : Sep 8 03:01:27 2025 GMT
Subject: CN=2b6206dc2cde1bd3fb89675ad5522c24fe954f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:4b:82:0c:c7:7a:11:77:f4:f2:50:2f:86:
7a:02:6d:fd:07:92:c1:3b:7f:a5:1d:4b:84:f0:df:
64:c5:84:89:41:65:5f:b8:c3:92:ee:0b:08:ed:bc:
1f:ba:2e:6b:ac:19:f0:7c:81:f9:63:08:b1:32:45:
b2:44:ed:cf:cf:fe:ff:a2:50:ac:07:ac:56:71:a9:
15:72:97:7e:69:58:c6:ea:d7:e8:69:85:1c:05:74:
1e:ed:31:ba:a7:05:d1:67:92:9a:9f:1c:bc:6d:55:
21:01:1b:97:e8:af:6b:21:a3:ac:b5:62:c8:95:d2:
7d:79:49:7e:74:17:09:08:91:5c:f0:83:53:22:0b:
78:4b:1c:92:18:27:b1:e2:2e:aa:46:33:89:c2:a3:
02:cd:13:66:fb:f9:ce:ff:69:e9:aa:7f:ae:ea:de:
6f:b6:19:66:6b:18:d3:94:3a:ab:5b:56:fb:4b:3b:
f8:b2:27:8a:ea:e9:55:a3:0e:46:ae:45:6b:3f:2e:
43:a7:b2:18:c9:22:95:6a:20:65:35:97:57:4e:5c:
e9:82:b9:26:fd:44:5d:ae:9e:2a:8b:ed:31:bc:9b:
3d:1b:a5:cf:6b:4c:dc:e1:ef:36:e2:4a:a0:5c:d4:
dd:56:f3:41:3a:ec:2a:a2:e1:c0:ca:60:c6:ea:6e:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:06:DC:2C:DE:1B:D3:FB:89:67:5A:D5:52:2C:24:FE:95:4F:6E
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:3d:d2:15:d9:39:94:62:2a:f8:ba:ff:fb:bc:a5:20:33:
f0:1b:8b:85:2f:37:bf:82:97:d6:e6:9c:b4:c7:2e:e7:66:e8:
ec:20:f6:64:3b:96:a9:b3:46:f1:fd:f9:d1:4d:da:6b:11:7e:
14:81:e4:9d:9e:f5:a3:7d:57:8a:ed:0f:d2:b3:f0:fd:99:77:
3d:c0:52:d4:b5:d2:ef:9f:cd:23:9e:41:51:6d:78:80:a7:b1:
07:8b:85:4e:99:13:8d:d6:89:c1:24:2c:e0:f4:5c:de:25:46:
7b:db:ab:85:01:b6:20:26:34:b6:71:2f:40:a8:09:85:c1:57:
05:80:1f:9a:0c:b4:1c:6d:77:2d:6a:85:09:15:ed:80:c3:fb:
a3:23:41:06:a0:71:4e:35:c6:6c:ad:e2:c0:3b:06:8e:b1:63:
f3:44:bd:73:e5:bc:d1:da:92:0b:2c:67:10:bf:f2:00:d6:0a:
ed:22:e8:91:1e:87:fa:7e:14:79:2e:34:be:8c:9b:22:a2:24:
f4:84:70:51:7a:09:51:58:a8:72:f6:ca:77:21:d0:45:52:84:
4a:91:b0:ca:bf:ba:d7:75:ed:fa:d6:8f:5e:f4:5c:85:85:f8:
af:1d:65:df:c9:4c:80:26:db:2b:6d:ec:7d:cc:ee:1a:17:72:
54:1a:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:34 2025 by rpki-client