Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: 5bfJ6mZKXmnOkvuPl2R3YrIxu5wFdboFQXmSK2X+cSc=
Subject key identifier: F1:43:8F:C0:A3:03:A7:2D:2D:7C:CE:8F:4B:76:2E:6B:C9:92:69:C5
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 01988B0ED944B33D7CB80C5E05039863B4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 19:01:02 +0000
Manifest this update: Fri 08 Aug 2025 19:01:02 +0000
Manifest next update: Sat 09 Aug 2025 19:01:02 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: TlBYACnbdnU4jLWqMqqOIKx4C2XM6nwnW9QeDWco6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:d9:44:b3:3d:7c:b8:0c:5e:05:03:98:63:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Aug 8 19:01:02 2025 GMT
Not After : Aug 9 19:01:02 2025 GMT
Subject: CN=f1438fc0a303a72d2d7cce8f4b762e6bc99269c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:6f:b3:d4:c1:0c:ee:bd:2f:20:b2:f7:3a:
ba:96:0a:d0:1e:62:bd:a6:9a:95:fa:e4:11:ff:d5:
ca:67:d5:9e:c3:1b:81:1d:af:81:70:12:1a:d2:9f:
c4:d1:f2:fb:37:28:18:99:e4:4e:d0:b1:25:7c:4c:
b8:e7:89:5d:ab:b9:a0:d8:78:0e:07:4a:72:7d:45:
83:f7:7d:53:6b:f8:b4:9c:b3:24:78:ea:23:40:01:
57:c6:51:ff:9d:6a:52:08:69:51:6a:7e:77:d6:25:
6a:9f:70:4e:04:ba:1c:dd:51:58:fa:be:bb:c0:cb:
c7:05:3d:57:88:ca:e1:bc:5c:bb:2a:c8:60:f4:13:
3f:22:4c:b8:cb:0f:9a:fb:9a:2e:b3:b2:c5:05:5a:
f5:86:79:45:66:0d:9b:46:0d:7d:e4:dd:29:e8:1b:
1c:1c:73:29:19:fe:3b:fc:31:11:47:03:6b:00:58:
11:04:e1:c3:ed:96:95:58:0c:b5:f4:52:40:9e:8a:
95:ab:ce:a6:5a:e1:79:91:1b:68:57:ea:b8:8b:e7:
45:7d:2d:50:0b:21:0d:56:5c:f3:a3:1d:15:d3:71:
da:b2:4e:2c:05:03:1e:55:ff:0d:de:7f:95:e9:a8:
20:25:a0:1d:89:ba:fc:77:6c:2a:9d:52:83:96:28:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:8F:C0:A3:03:A7:2D:2D:7C:CE:8F:4B:76:2E:6B:C9:92:69:C5
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:48:93:69:17:d1:2e:b2:b8:59:9f:db:b0:39:93:48:af:fc:
63:52:4c:12:30:d3:07:8f:ff:c7:d8:f7:72:48:49:3a:ec:7e:
18:56:27:d7:15:df:2d:fb:c3:89:00:3b:ae:44:da:95:a7:9b:
d7:1c:46:5a:01:8f:3b:0e:28:2e:a8:cb:f3:ee:e4:8c:1a:f2:
05:c6:ff:70:7f:fc:34:85:db:1f:63:04:c4:3f:e3:52:48:3d:
2d:6c:57:f5:87:d8:11:29:e2:31:d3:ac:dd:9f:5e:98:b3:8f:
60:a4:bb:dd:72:41:d2:8e:32:46:bb:f9:d9:a0:68:23:3e:6d:
84:25:8c:47:16:f5:f4:ff:8e:ba:f5:ee:93:cf:43:57:c0:51:
4e:d5:05:53:e4:0f:63:2e:5d:8f:03:51:93:34:a5:cc:c2:b2:
de:96:f5:f5:21:77:9d:29:d6:67:71:06:e6:bf:3b:4f:6b:a9:
33:f5:52:d1:b8:49:6c:12:05:95:f8:14:5f:37:79:90:30:f8:
99:61:e9:2d:d4:de:54:d1:26:26:96:bd:b6:cd:17:45:96:f5:
4f:d0:10:03:95:77:bc:a7:b0:12:cb:aa:d5:7c:d6:14:9a:de:
95:85:13:06:4c:52:04:91:02:93:a6:1e:19:d4:d7:a6:0e:a9:
0d:fc:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:26 2025 by rpki-client