
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier: 8ayMpCz+os2idAOXKIYetAzzONbvnjwtCDgR5rXVVUI=
Subject key identifier: 84:96:BB:60:75:42:0B:A5:3B:0E:E3:31:93:2A:4F:30:5A:4D:71:2A
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial: 019873E3788365254D04B51EF3CAEF19E665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: A9Pnah3tyzVTsUtYMHCQ7Bt/c1DTKzbZEsjXz2WWqyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:78:83:65:25:4d:04:b5:1e:f3:ca:ef:19:e6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=8496bb6075420ba53b0ee331932a4f305a4d712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:41:b2:f5:37:57:89:2f:ea:86:65:92:d4:
ac:f8:2e:a4:6d:f2:a9:05:cd:22:4a:70:41:71:da:
26:b5:e4:8a:d4:ea:62:a9:dd:be:e9:ea:50:6d:72:
0b:33:c4:24:d5:35:7f:b1:59:b1:81:ad:72:22:12:
89:43:15:62:aa:e6:9b:04:88:1b:76:a3:e6:cc:e1:
3d:bd:d8:a3:77:6f:b3:df:77:b8:91:bf:41:ab:76:
92:40:e9:47:95:3b:d9:09:09:22:a9:bd:e9:4e:36:
ba:a6:0d:cd:b8:2f:76:d3:e8:df:ce:09:da:21:77:
38:a9:4e:09:0a:dd:11:b3:78:22:2f:28:2d:c2:c8:
53:fb:66:90:bc:3f:5d:5e:3f:de:79:89:7a:79:47:
6a:6f:07:a6:0f:52:37:05:9f:c3:8e:4c:91:33:04:
f8:99:21:36:8e:d0:14:93:47:a5:1c:3f:76:98:83:
86:8e:a3:98:8d:97:81:60:45:c9:35:ae:91:df:a1:
b8:16:09:cb:3a:e0:40:22:0e:fb:be:6d:eb:ba:82:
d6:23:cb:f6:d3:e0:bb:87:c3:9c:1a:e9:40:fb:6e:
a0:31:97:8b:65:03:34:29:b4:bc:9d:23:bc:9a:98:
6e:8c:3d:b9:1b:00:10:e1:86:d1:f4:0a:d1:d2:a0:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:BB:60:75:42:0B:A5:3B:0E:E3:31:93:2A:4F:30:5A:4D:71:2A
X509v3 Authority Key Identifier:
keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:56:7d:79:24:b0:76:d3:d7:40:96:2a:3a:4f:dc:d1:ae:
f6:5e:47:2b:52:ab:60:11:70:20:f3:26:d3:eb:fd:c5:cc:08:
a8:24:d3:7a:4a:ac:24:0d:fa:3c:24:02:ab:cd:19:22:f0:cb:
23:71:0d:ed:1b:15:92:34:54:4f:fe:3c:5a:9f:93:60:97:b5:
e8:ea:74:7e:59:4d:d7:cd:65:e0:9c:28:15:ce:e2:d1:de:15:
8f:88:28:6d:fe:4e:82:a5:02:c5:34:ce:0a:85:c1:89:a4:22:
9d:87:29:de:78:0a:7f:97:07:fc:45:5e:ca:2c:69:ad:d6:a4:
82:34:7a:fd:2e:98:17:cd:47:9a:ff:9c:20:d7:30:cb:51:66:
9e:ab:96:4a:23:30:1c:03:5e:a3:e8:bd:c1:96:3e:c5:ab:e1:
5c:08:15:be:46:78:6b:d0:6f:0c:7b:b5:c8:ef:30:96:fd:9c:
29:d1:b5:6c:e3:5d:bb:41:f6:c4:51:09:8a:96:fa:01:16:98:
81:2b:41:52:15:4e:35:e3:86:d2:86:9b:15:ee:cc:bb:f8:3a:
d2:02:9f:a5:1a:ce:60:70:4f:8c:ae:d4:86:cb:2f:2e:05:37:
ff:1a:6c:7f:d7:57:42:fb:cc:25:c8:0f:ee:a0:01:a9:0b:c6:
85:bc:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:09 2025 by rpki-client