Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: J0At8MZCj39Tz6o+0FH+9xN3cB/lAyFiOCrg3lK5h0w=
Subject key identifier: 57:C5:1D:0C:97:C6:53:82:CC:F9:7F:9F:E0:DA:BD:11:47:95:BB:D9
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019922554DBD0DAEA10296DBE5D6133D820E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 0881
Signing time: Sun 07 Sep 2025 04:00:39 +0000
Manifest this update: Sun 07 Sep 2025 04:00:39 +0000
Manifest next update: Mon 08 Sep 2025 04:00:39 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: rzW9mneMnOxnnrqQSVpeaJMaxGLlg91ORDOC3V58gn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4d:bd:0d:ae:a1:02:96:db:e5:d6:13:3d:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Sep 7 04:00:39 2025 GMT
Not After : Sep 8 04:00:39 2025 GMT
Subject: CN=57c51d0c97c65382ccf97f9fe0dabd114795bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:16:45:85:9c:33:11:38:c1:1c:e8:14:70:
4e:ab:f5:10:a9:48:83:77:87:a8:96:86:81:cd:5c:
41:9a:42:e8:d5:67:22:44:52:7c:2d:99:d1:6e:0e:
68:29:d7:73:41:17:7b:49:7d:08:b6:cb:be:ff:1a:
7a:84:03:10:7d:42:82:01:5a:be:4e:68:d1:91:35:
a2:c8:8b:2b:a2:23:a8:10:af:97:e9:dd:de:27:a7:
a8:4b:42:c1:74:af:71:2f:7b:ca:25:2d:81:1c:6d:
28:2d:5c:4b:67:5e:ea:e5:34:e5:92:c8:12:3b:cd:
d4:89:0c:d8:de:37:4a:a0:8e:bd:6b:34:ac:4f:65:
57:2b:54:23:09:da:db:5c:b4:27:50:80:5b:60:57:
21:17:83:fe:a3:42:12:d1:09:2a:5a:eb:9b:df:94:
bd:24:2f:b3:99:7c:d3:ae:e2:5b:e6:c7:55:7e:c3:
80:d9:9d:b5:3a:3f:0a:25:f9:53:69:56:d1:1c:e5:
97:35:8c:b9:8b:52:04:8b:a3:ad:af:9c:2b:6e:19:
ae:be:6e:6d:28:30:2b:3d:d0:86:7b:85:ee:af:52:
78:d1:89:4e:72:dd:e9:e5:2c:bb:1b:f3:49:1c:a5:
1c:36:ff:9b:4a:32:26:9f:78:1c:f5:2e:f2:86:72:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:1D:0C:97:C6:53:82:CC:F9:7F:9F:E0:DA:BD:11:47:95:BB:D9
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:13:cf:b5:8f:80:2e:17:05:27:6f:64:70:00:9e:c0:e0:
a2:96:f6:3d:a2:66:03:27:e6:bd:fa:cd:af:f8:58:e5:f1:36:
35:c8:c6:99:c1:10:a7:2a:5e:74:94:ea:6e:f3:be:b4:9e:14:
2b:4b:eb:d8:28:64:59:9a:72:67:d6:8d:31:68:2a:86:08:25:
eb:c2:80:03:ec:1a:8c:05:5e:bf:c9:f2:1d:c8:39:d2:a9:0f:
e8:7c:18:8f:0f:72:ad:0f:a4:fc:fa:dd:14:17:39:25:f1:f0:
c6:49:19:c4:d9:2c:76:2d:ee:30:4d:2d:e8:04:7f:c0:0c:0f:
d4:bc:c4:c9:48:b2:80:2d:48:b0:09:76:3f:4f:0a:52:fe:d0:
ce:01:94:a0:e2:e3:a8:8b:2c:e3:5f:8d:19:78:d5:5f:01:c0:
44:95:e3:74:68:d4:d7:99:83:71:7d:1d:22:3a:23:b9:23:a1:
1f:83:a0:82:be:bc:b2:0e:71:4e:64:eb:82:fb:4d:19:3a:80:
a8:17:c9:29:1c:79:7d:4e:50:d3:cd:1d:64:28:8a:21:51:2b:
1d:ca:0e:36:01:ab:9c:de:6a:d8:fb:a4:72:63:ee:3e:18:62:
a3:52:75:36:b7:ff:1d:0c:0b:7e:e9:7f:af:b5:46:5c:5b:38:
88:6e:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:49 2025 by rpki-client