Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: djO5rdY2NmfQGFTl9MbAzw/dkUhmxWc/bjjamdNoRvw=
Subject key identifier: 8E:87:DD:F8:76:7F:7E:BE:06:0D:52:23:F7:48:B8:39:66:5C:F8:41
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 019872CF15BA7DFE724A0957A4C0FD82A5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 090E
Signing time: Mon 04 Aug 2025 02:00:30 +0000
Manifest this update: Mon 04 Aug 2025 02:00:30 +0000
Manifest next update: Tue 05 Aug 2025 02:00:30 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: wYnnDU12feyoJQORzaso3mcrsHSctttdN1g6UyYvSJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:15:ba:7d:fe:72:4a:09:57:a4:c0:fd:82:a5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Aug 4 02:00:30 2025 GMT
Not After : Aug 5 02:00:30 2025 GMT
Subject: CN=8e87ddf8767f7ebe060d5223f748b839665cf841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:e7:f0:8d:8d:11:b8:9d:3d:1a:72:24:56:
50:7f:12:59:21:fa:e3:07:20:07:9e:d9:38:6b:0b:
a4:af:e8:08:f0:60:86:c9:67:3f:d4:d5:87:fd:a5:
65:eb:12:b4:78:30:11:f0:3e:ca:69:46:35:9c:a0:
f3:66:aa:5b:f0:d6:77:e1:56:8e:90:b9:17:a0:9b:
55:e2:18:10:ab:cc:e1:1d:e7:37:47:d6:b0:3e:04:
5f:c2:66:41:05:47:c1:79:ea:c3:b7:ee:80:79:72:
00:1d:09:ef:51:38:44:d2:e2:09:8b:bc:17:b3:65:
d3:0e:1d:a5:c0:16:31:1d:78:cd:ed:34:32:b1:80:
ff:db:22:ab:31:46:05:1a:cc:54:6a:5a:ba:d7:4a:
05:c8:39:80:a9:73:5d:cf:3b:51:ab:ac:5c:a9:f9:
18:6e:8c:c7:45:48:7a:61:e8:a3:ad:3f:b3:5d:77:
90:8f:2c:96:c2:49:80:73:5f:5f:4e:a7:36:27:28:
2d:40:d8:77:89:dd:03:64:12:84:c2:af:3b:d0:04:
57:e6:19:70:08:09:28:91:45:f6:3b:58:ca:71:8c:
63:d0:96:19:85:c7:0b:d7:b4:0d:69:85:59:a5:e9:
a6:63:69:f5:3e:6b:97:a4:4f:de:ec:78:da:3f:fe:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:87:DD:F8:76:7F:7E:BE:06:0D:52:23:F7:48:B8:39:66:5C:F8:41
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a8:04:36:32:c4:f6:32:37:19:af:6f:e4:fd:83:c1:93:22:
dd:5a:96:f1:08:bf:a3:83:01:ab:f9:34:13:39:70:8f:66:13:
f0:4c:a8:09:97:12:45:d6:74:fb:71:48:c4:b6:81:8f:16:04:
b5:ad:1a:ef:9e:07:b2:46:37:15:68:f3:87:b4:6b:97:9a:e0:
ca:48:23:6a:b6:d6:d0:8c:6b:b4:c5:c0:c0:cc:fa:86:02:5d:
b2:9d:c2:aa:85:fb:67:c3:ee:9f:34:6d:eb:e8:f6:53:29:35:
78:29:3a:aa:12:de:5d:de:6b:fb:84:a6:04:33:b9:31:79:80:
f8:6c:ca:8c:79:66:68:9a:66:92:f1:c9:9d:67:30:21:95:7e:
00:74:54:e0:91:cd:6f:23:f3:d1:fa:e9:f8:e1:c2:ce:c7:24:
8b:29:2c:54:4a:b1:a9:76:6c:a7:73:bc:38:f7:b0:b1:2e:dc:
49:47:38:f6:ca:e6:27:14:1c:f4:90:c8:b0:c5:43:d5:c9:d2:
b7:71:6a:0d:28:5a:6f:cb:a1:ed:44:94:50:54:a9:1d:34:9c:
26:92:44:bb:8b:fb:e4:a2:75:7c:88:39:e2:88:8f:b5:7b:68:
f5:12:f1:b8:5a:09:c4:67:25:07:14:6a:a8:5a:05:42:38:cf:
ae:23:68:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:23 2025 by rpki-client