Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier: GQ3dk8iFGW+zn/pjQDrWbOHDy2yvBm91UYZwC/YNGwM=
Subject key identifier: 34:1C:18:43:80:DF:06:10:68:73:86:09:DC:4E:12:83:7A:EC:D0:63
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial: 01987418DE26542D09DFADE05DFBAF17038F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number: ED
Signing time: Mon 04 Aug 2025 08:00:43 +0000
Manifest this update: Mon 04 Aug 2025 08:00:43 +0000
Manifest next update: Tue 05 Aug 2025 08:00:43 +0000
Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: JKwOvkvaDkqrDEvoScC3ECaUBE/1SLYSzY5ZsFu2USs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:de:26:54:2d:09:df:ad:e0:5d:fb:af:17:03:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
Validity
Not Before: Aug 4 08:00:43 2025 GMT
Not After : Aug 5 08:00:43 2025 GMT
Subject: CN=341c184380df061068738609dc4e12837aecd063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:3a:81:0b:f0:68:1c:89:b5:d5:6a:79:f8:
8c:71:37:8b:a0:dd:95:5a:34:9d:1e:b4:86:78:63:
f3:80:35:30:69:74:de:27:d5:ff:4e:6c:bb:93:cf:
12:98:5f:40:21:78:f8:77:b6:da:6f:65:f0:42:d5:
f9:dd:80:6e:08:78:20:64:28:4b:fe:60:63:19:59:
34:89:d1:28:ef:99:c7:a9:2a:fd:55:4a:45:ea:8d:
2f:26:a4:00:0a:0f:c6:d0:92:3c:4e:fe:8b:7c:5b:
32:f4:68:84:6a:aa:fe:85:71:40:7c:de:a6:3e:fd:
87:fa:96:e9:0a:a0:06:2f:4c:e7:7a:23:10:e3:4c:
51:2a:96:5a:d0:20:ed:e3:1a:b1:22:91:d6:0d:e2:
0e:4a:b2:5a:5f:ca:a4:ec:cc:10:12:a6:56:c9:9d:
c1:01:3f:4d:aa:aa:ca:f6:0a:d3:e1:46:1c:15:db:
93:f4:17:20:10:6d:c1:a5:98:d7:12:1f:b5:0c:ff:
ec:c9:a1:77:29:d4:04:72:a6:c6:5a:59:07:6e:9c:
24:18:a2:ed:b9:1a:55:37:3e:c0:f6:82:82:7c:aa:
1d:79:74:e4:0c:18:cf:98:e0:0a:c2:2e:02:78:a7:
ab:0d:4f:f4:bd:93:ac:c9:fe:44:b9:35:1d:4c:29:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:18:43:80:DF:06:10:68:73:86:09:DC:4E:12:83:7A:EC:D0:63
X509v3 Authority Key Identifier:
keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:b7:ed:68:ea:8e:88:a1:df:78:2c:f1:c1:02:48:ee:f5:
1b:f2:b0:fc:1f:a2:3f:f8:ed:7c:77:e5:94:ef:b0:55:3c:94:
80:a8:3c:88:aa:6b:2f:15:10:6e:dc:36:36:0c:ac:5a:30:e1:
d7:f2:67:b6:a5:db:f2:2c:50:11:a0:3a:59:a1:39:a6:2d:f4:
3e:8e:73:23:ec:1d:17:36:3c:2c:b4:fb:30:17:6e:37:5c:97:
24:3f:b7:c0:d3:b7:b4:ac:69:24:68:0b:45:47:f1:bc:49:08:
0b:97:85:54:a1:97:48:41:61:61:2e:31:48:7a:8a:26:b7:40:
ec:1f:25:6a:87:f0:e6:db:45:1a:dd:78:9a:84:87:b2:6c:cf:
50:d1:3b:d6:1e:ff:84:ad:c9:cb:43:f9:d6:c3:89:87:61:35:
2f:66:24:50:4d:2b:36:84:8f:44:d8:9c:5e:b5:14:ba:26:73:
c3:2a:7f:a7:d7:c3:ec:b0:f0:4e:4b:ed:97:78:ed:0a:15:97:
af:49:e3:45:17:6a:84:af:c5:4a:41:11:21:44:ee:a9:d8:a7:
c0:38:08:7d:d3:28:4f:94:c1:50:c6:66:d8:e2:65:c2:a8:8f:
22:5e:f9:67:73:fb:d5:2e:e7:51:2b:74:4f:a7:c7:b6:41:12:
18:4f:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:47 2025 by rpki-client