Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: XHGgAi3evT5HLDOfZcOg1ldZ0MFgkx4TO7cY8w+ihRU=
Subject key identifier: AA:E4:E3:59:3A:4D:59:81:A5:C2:99:D6:54:F2:A3:B9:96:39:E3:9A
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 0197684E3FD1452999F02D1569E18644C16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 0884
Signing time: Fri 13 Jun 2025 08:00:48 +0000
Manifest this update: Fri 13 Jun 2025 08:00:48 +0000
Manifest next update: Sat 14 Jun 2025 08:00:48 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: 2SUpGmhphiVzHl791ukTTJrjDQmdPIbQvmNzsgsyPh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3f:d1:45:29:99:f0:2d:15:69:e1:86:44:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Jun 13 08:00:48 2025 GMT
Not After : Jun 14 08:00:48 2025 GMT
Subject: CN=aae4e3593a4d5981a5c299d654f2a3b99639e39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:32:a2:0e:f7:1f:32:67:84:1e:bc:91:4f:
30:52:97:c7:85:a6:98:9b:8a:76:56:20:1b:df:57:
67:4b:fa:b5:60:97:1e:09:ed:d9:ab:a6:b3:b7:44:
6b:e2:3c:c5:d9:10:38:b1:fa:ea:2a:3b:f4:12:b9:
bb:c9:70:da:52:ed:85:be:35:ef:b1:b8:f6:79:9c:
6b:73:be:02:70:87:31:66:e7:8e:8a:da:4d:bc:66:
bb:c7:ef:e2:b7:1d:16:04:50:50:8d:4c:da:17:dd:
4e:08:a5:47:f2:47:db:ef:86:98:ff:f1:9b:14:42:
cf:20:60:88:64:db:f9:0b:34:35:0d:a1:91:9e:60:
93:f9:85:43:54:7e:ca:dd:df:7d:c6:fe:df:df:f2:
9a:34:d8:5c:c5:3c:4a:f6:0c:71:cf:ad:ba:43:aa:
19:61:41:5b:d9:61:3b:98:88:48:09:d6:32:65:d3:
db:30:5b:08:8f:95:95:bb:83:62:6a:d9:8d:e2:a9:
98:69:27:10:8c:09:e5:45:64:53:19:f9:ec:3a:95:
8f:0a:62:89:fb:09:0a:fb:49:a4:7b:1b:07:4b:53:
17:57:f2:22:d0:87:f2:bf:72:8e:7a:80:fa:36:04:
ab:47:a7:2c:de:15:6c:d8:4c:12:6a:9c:25:36:6d:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:E3:59:3A:4D:59:81:A5:C2:99:D6:54:F2:A3:B9:96:39:E3:9A
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bc:b6:eb:35:cc:66:67:de:56:e0:0a:2b:2d:e7:b2:a9:88:
44:98:6f:f0:d4:71:52:39:31:7d:14:43:83:7d:34:48:53:e7:
6c:be:08:bb:d5:26:67:13:07:58:a4:a9:7a:19:e1:7b:c3:ef:
81:85:94:5f:90:d4:47:85:10:7e:63:80:72:38:8f:e1:b7:49:
2a:40:29:20:49:d7:2d:fd:96:b3:2f:75:de:bb:4c:ff:4d:55:
4c:fa:ed:36:b9:ce:2e:05:ea:aa:96:97:9d:96:b0:4b:f2:7e:
6d:31:6a:55:aa:f7:4b:2b:56:22:c2:77:64:37:c6:88:a5:fd:
20:83:83:73:2b:76:c2:4b:a5:a7:4d:c6:05:85:01:7a:86:33:
88:c0:7e:cb:7c:e9:85:bd:1a:d4:be:b9:eb:77:5b:ff:67:f9:
55:a9:30:09:a3:9d:91:52:09:e9:0b:1e:8e:9d:57:9c:fa:cb:
40:1a:d3:17:08:f9:51:8b:76:ed:51:49:0b:d4:34:af:3d:29:
d4:9c:55:d8:ee:d8:51:03:e0:55:a6:27:73:0a:63:10:1b:72:
1c:90:f9:3b:b4:23:7d:ed:44:aa:f6:8b:e3:78:1d:42:ec:a4:
53:f6:36:dc:30:0f:d0:9d:f8:e7:f3:af:7e:8d:99:2a:7a:33:
c0:81:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:31 2025 by rpki-client