Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier: qoeJFzktmZJ4fu0yFWUfoPikl5aRfUmr2fYea5EKpYs=
Subject key identifier: 54:BE:40:5B:35:B5:7B:10:5A:45:EC:EB:DC:C7:33:1E:A4:2E:E8:F5
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 019873745A3B54885C071D77765819B47B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:01:01 +0000
Manifest this update: Mon 04 Aug 2025 05:01:01 +0000
Manifest next update: Tue 05 Aug 2025 05:01:01 +0000
Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: FMritPwvQLfIoEOtgWoXdLP2Oh+z2O4s11u3zdDJYro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:5a:3b:54:88:5c:07:1d:77:76:58:19:b4:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Aug 4 05:01:01 2025 GMT
Not After : Aug 5 05:01:01 2025 GMT
Subject: CN=54be405b35b57b105a45ecebdcc7331ea42ee8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:55:b3:79:36:be:b0:a7:29:92:46:e9:c0:
e8:1e:9c:50:8a:57:a3:34:5c:b9:36:55:37:c7:1a:
ee:1a:1f:0b:e6:05:1a:d3:a5:f3:ad:99:13:8e:d0:
70:87:0f:84:8a:4a:ac:af:a6:e0:80:5b:a2:60:88:
eb:cb:87:30:9a:d4:ea:ab:22:9a:e4:36:a1:ff:40:
5a:73:cd:7b:61:7d:02:79:1b:e4:b7:76:8b:1e:d5:
08:99:1b:e6:55:ef:97:d4:c1:b1:20:cd:1b:89:44:
0d:c5:db:bd:6e:f2:91:67:47:b1:7b:b4:f4:fc:d9:
81:f5:68:21:36:ce:c5:c1:1e:b7:bb:7e:5a:cc:f3:
4c:f4:f4:e4:2c:66:64:ca:ec:79:69:2c:e6:aa:ba:
60:2f:39:bc:5c:95:e9:e8:d2:cc:8b:bf:43:e1:9d:
61:07:0b:8e:a3:79:50:36:ea:d6:91:51:d3:a7:e2:
29:33:ea:eb:b6:aa:03:52:3e:21:86:ee:c5:d9:73:
34:9f:ba:f2:20:fd:30:19:43:10:2e:2e:be:a5:ba:
ad:9c:e6:a7:02:48:ad:4c:66:12:6a:2a:35:75:1d:
46:d4:7f:39:55:94:5b:e2:bd:95:8c:13:4a:13:6c:
6a:8f:f6:0d:41:67:6d:31:12:c6:47:8a:1e:70:76:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:40:5B:35:B5:7B:10:5A:45:EC:EB:DC:C7:33:1E:A4:2E:E8:F5
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bf:46:b8:8c:21:46:57:c6:28:77:ad:37:93:46:f2:9c:ea:
81:b6:3a:64:e1:90:26:50:40:67:e1:fb:53:d0:46:75:b6:2b:
1a:53:4b:22:68:45:61:c9:50:36:23:d7:34:b0:30:db:c1:65:
25:ab:42:e6:95:3c:46:32:ff:c8:e4:65:f8:02:28:73:3b:7b:
5d:f8:bc:20:24:88:54:9c:b1:4c:d0:3a:7d:d4:4a:2f:f2:ef:
8d:58:6e:07:42:c3:ae:0f:63:db:6b:47:74:f5:b0:37:91:33:
53:97:99:14:df:fb:1e:95:13:7b:f8:78:01:b2:57:27:a1:c0:
a0:3c:a7:4f:d2:89:00:8e:aa:dd:92:2b:c4:1c:72:3e:63:43:
85:3d:f8:63:24:c2:1e:93:b9:30:c8:88:38:55:ea:a0:69:49:
9e:e4:7b:85:55:63:0a:f6:72:80:45:16:b7:2e:f6:d8:c6:f7:
52:6c:73:7d:0c:4f:28:33:8c:28:cd:ad:b3:da:82:04:e2:12:
28:7b:48:b0:a8:03:13:ed:97:fc:18:c4:66:d6:83:6d:b1:69:
c9:2b:27:f4:4f:65:3b:60:82:fe:0f:03:07:a3:d0:d1:00:cc:
1b:94:19:c4:f4:d4:6b:fc:a5:6c:1b:81:18:d8:bf:93:69:d5:
3a:6d:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:43 2025 by rpki-client