Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: FLBSlZQERVDlW/LPv/1orxZKJhYeURqAxAcN/pNs4EE=
Subject key identifier: 00:63:83:C2:CD:77:70:D9:B5:17:A9:AE:07:B4:3E:8D:2E:EA:68:ED
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 01987C0A0E49A224B6A613B86D91B3512657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 15AA
Signing time: Tue 05 Aug 2025 21:01:30 +0000
Manifest this update: Tue 05 Aug 2025 21:01:30 +0000
Manifest next update: Wed 06 Aug 2025 21:01:30 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: 3Ej9/ahC1KFS6PcF/Rjf7tCzQUUDrmGRCl+jgUMVLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:0e:49:a2:24:b6:a6:13:b8:6d:91:b3:51:26:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Aug 5 21:01:30 2025 GMT
Not After : Aug 6 21:01:30 2025 GMT
Subject: CN=006383c2cd7770d9b517a9ae07b43e8d2eea68ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:92:9d:36:d5:88:5f:a9:e8:36:c0:44:c0:
28:b5:1a:21:cd:b4:64:d2:30:02:3d:19:63:77:98:
b9:d5:60:4c:39:71:83:ee:06:36:27:94:df:6d:97:
86:2b:84:88:c2:48:e2:fd:b0:1d:f8:73:14:c0:6f:
d6:1b:49:8b:21:a9:48:af:0c:ad:3c:5e:87:c7:24:
af:43:57:65:5f:9c:3e:66:b0:e3:a9:0b:be:73:18:
83:fe:b1:65:52:8d:cb:d4:f7:ef:46:eb:1c:4c:d8:
4f:0b:96:5a:02:05:c3:0a:34:49:de:90:98:fb:80:
5e:e2:b5:3a:7c:a8:84:83:92:f3:ff:a1:1f:2b:b1:
2b:fb:65:39:0a:fb:c6:72:70:40:35:03:85:7f:ec:
17:0f:03:4a:b6:4f:08:11:ad:67:7b:47:6d:ad:6b:
55:b4:27:0c:10:05:3a:af:f2:07:3e:75:a9:46:3a:
a5:66:8d:1b:da:c5:0e:dc:66:88:85:33:e1:a2:3e:
3e:c1:33:e3:f1:ff:5d:ef:bf:17:2a:17:cc:2e:f5:
03:b5:2c:09:10:b4:25:25:99:8b:88:5d:9e:25:2b:
89:9f:84:61:7d:d2:91:0d:ab:62:7c:6a:82:12:ed:
e1:36:e5:30:92:3f:c8:60:0c:07:0c:d2:73:34:d0:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:83:C2:CD:77:70:D9:B5:17:A9:AE:07:B4:3E:8D:2E:EA:68:ED
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:3b:af:c3:97:b9:4e:50:1c:98:8b:bc:61:7c:16:40:e2:
00:59:f9:6a:13:36:b5:80:2a:4e:4a:84:f2:73:0c:f5:74:28:
cb:9b:ef:f7:2d:c0:b4:72:83:09:38:6a:7a:8a:8c:3b:c3:bb:
76:6d:1b:bb:d3:ec:12:06:c7:d8:e0:c5:fe:6b:ec:81:52:f1:
d5:75:bd:a8:60:39:53:9f:95:4d:66:6f:32:49:54:98:ef:92:
79:32:68:87:7c:c4:33:03:74:c1:89:14:64:86:71:7e:11:41:
18:65:32:bf:a4:0e:51:15:c1:44:d1:7b:64:9a:da:e4:2b:c5:
10:50:47:bd:a9:e6:1d:eb:cb:7f:50:e0:8c:6b:02:b2:34:7b:
d5:3e:d4:d9:20:01:52:87:a8:3b:cd:1f:cf:43:d1:e2:55:1a:
85:c5:2c:44:9a:25:ea:00:aa:86:e0:ef:21:7a:b2:86:c4:49:
e3:2e:93:0e:56:d5:68:25:1f:44:6d:b7:62:f5:08:0a:21:4a:
4a:e5:3c:c1:9a:c3:30:d6:b2:aa:ab:9a:8f:aa:b8:52:68:93:
89:e8:0e:27:8b:69:bf:cf:6e:f0:13:ad:b9:31:2e:bb:01:a7:
c7:3b:0a:01:4b:e9:7f:9e:c3:e7:53:8a:d7:e1:eb:64:36:ae:
dd:99:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:16 2025 by rpki-client