Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: KW040BthQ3C/zMYhUcnwluG0ygX+q2JDFtiVwC4G1tY=
Subject key identifier: 4A:DF:AF:39:A9:10:A7:2C:92:9A:68:6D:A1:08:31:7C:89:83:68:C6
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01989894E4E525B93AF9F99C7F43B8A531FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 15BC
Signing time: Mon 11 Aug 2025 10:02:31 +0000
Manifest this update: Mon 11 Aug 2025 10:02:31 +0000
Manifest next update: Tue 12 Aug 2025 10:02:31 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: HNFLPQ+XKv+6dxnmJ8LYFBhqlkiY9Cq4XGPHGvsNmBg=)
2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:94:e4:e5:25:b9:3a:f9:f9:9c:7f:43:b8:a5:31:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Aug 11 10:02:31 2025 GMT
Not After : Aug 12 10:02:31 2025 GMT
Subject: CN=4adfaf39a910a72c929a686da108317c898368c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:43:86:8d:30:0b:b4:c5:1f:61:03:f5:93:
7c:6c:e8:52:55:ba:87:f0:58:a0:18:5c:6f:5d:99:
fc:93:4e:ab:ad:df:e1:0e:42:6d:2c:dc:e4:47:ff:
00:4b:d7:5a:af:ac:1a:bb:89:9b:21:34:a6:5d:fa:
91:18:f7:fd:31:ca:af:8a:27:24:d2:99:20:a6:69:
b3:1e:81:ec:af:20:a3:cc:71:5d:53:e0:17:9f:9c:
e8:69:70:ba:95:26:0d:71:c4:28:77:67:31:a5:33:
55:2c:7a:32:46:7b:3f:1c:7c:39:0f:bc:3f:80:82:
4d:a0:52:52:a9:3d:66:0e:2d:6e:ac:5c:a2:65:80:
ac:3b:b2:51:07:31:75:d7:54:04:9b:c2:91:7b:1d:
9a:5f:05:d0:1c:11:10:69:85:c1:c6:47:aa:1f:bb:
81:56:70:7f:f8:bb:1e:af:29:3e:d2:e5:90:8e:7b:
c0:2e:ef:c0:db:a5:23:54:c7:c7:e3:07:f1:51:b5:
91:0e:d1:26:ea:ec:0c:6c:dd:1d:44:c5:b2:c3:f1:
55:fc:cc:fe:5f:78:13:05:ab:03:3e:7a:45:38:73:
b2:07:aa:64:3a:76:15:ba:bc:4e:c6:af:df:76:64:
63:e0:eb:c8:4b:99:0b:93:4a:d9:a9:d6:a7:f7:9e:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:AF:39:A9:10:A7:2C:92:9A:68:6D:A1:08:31:7C:89:83:68:C6
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d2:9f:e3:77:c3:65:5b:01:50:a2:cc:3a:c0:35:15:34:29:
6d:32:58:ad:2c:58:78:fd:75:a9:5d:85:ac:3e:d8:ee:74:f2:
40:2f:d0:8d:5c:38:f0:33:de:26:1b:22:28:0a:db:91:f4:d1:
45:c8:0b:22:ef:51:8d:8a:89:19:1e:b9:ba:e6:8b:30:c2:42:
0c:9c:1a:7d:b7:e6:6f:31:9e:58:62:b1:68:75:cd:c4:98:96:
53:51:0a:11:f2:81:fe:4c:66:cf:6a:ef:00:35:0c:9a:b4:8f:
89:46:29:bb:b1:03:ed:d3:5c:ae:5d:88:ae:dd:6d:d2:96:f3:
0f:c1:60:f1:aa:e2:82:62:d0:09:88:68:9d:8d:17:bb:b1:c6:
eb:1f:ee:be:5d:99:dc:09:f9:4d:6b:ce:46:1c:21:1f:11:bf:
02:54:89:f5:40:cd:ec:12:d1:c9:b4:8a:42:80:76:c5:a7:3c:
8f:72:88:7b:2d:be:a3:15:71:06:73:71:b0:9e:2d:6b:e3:07:
44:e0:e3:4f:8a:e1:08:28:57:c5:c4:b1:79:40:2e:85:31:94:
c7:b3:6e:3b:96:1d:a2:01:eb:95:df:77:74:09:eb:40:e6:6e:
c5:0b:29:3d:e7:ce:37:5d:7d:68:17:4c:de:98:53:14:2e:8e:
cb:f9:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:48:08 2025 by rpki-client