
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: SNLq1Bw9yz1Cffi3z9OniZPh7b43L3oKjYTtOpdTHvY=
Subject key identifier: F2:00:6C:80:56:F3:E5:CA:83:35:19:93:43:E8:8D:FE:29:8A:4B:0F
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 01988167B8CF773EF062F3D66FEC537E8565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 1488
Signing time: Wed 06 Aug 2025 22:01:55 +0000
Manifest this update: Wed 06 Aug 2025 22:01:55 +0000
Manifest next update: Thu 07 Aug 2025 22:01:55 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: hLBNAL4367ctfRP6NkmgpI/eJDE/6yoIUL08dBK3QS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:b8:cf:77:3e:f0:62:f3:d6:6f:ec:53:7e:85:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Aug 6 22:01:55 2025 GMT
Not After : Aug 7 22:01:55 2025 GMT
Subject: CN=f2006c8056f3e5ca8335199343e88dfe298a4b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:5b:9a:75:29:1f:77:ea:a0:10:b7:d7:6d:
2b:82:cd:e1:48:9d:df:e6:07:ab:09:7c:b0:29:f6:
eb:03:31:ae:c6:bc:61:fd:3f:94:ca:4d:e7:6b:7f:
61:37:34:80:6f:2f:50:6e:63:29:e3:a6:b0:10:9d:
e3:5e:91:2c:7d:18:59:ac:b4:a7:50:a5:f6:f7:14:
04:aa:25:d8:65:59:83:7d:ce:7c:8e:8c:67:83:79:
8f:46:fc:7a:c0:97:38:b3:aa:c7:51:55:57:2a:ed:
1a:81:98:c9:3e:51:83:01:bc:62:eb:68:41:4b:03:
50:db:23:25:02:83:6b:9f:62:5f:39:a6:b2:78:39:
2b:1d:96:8a:fd:6d:93:2c:4c:f0:80:0e:4c:34:7b:
6f:6c:2f:6f:b8:bd:de:b3:c1:1a:39:f6:fe:70:93:
7d:38:33:d8:10:1f:3f:9d:7c:7f:d7:56:95:aa:81:
27:1c:2a:ff:b2:4e:15:c4:3f:6a:e7:66:bb:18:4f:
4d:48:2c:fc:95:c8:2f:98:6d:65:10:18:40:fc:00:
6e:bd:6f:46:eb:c8:58:d7:35:4b:4b:bc:92:87:9c:
34:e0:a4:12:43:24:24:50:80:47:b0:f9:20:16:dc:
2f:f3:d5:37:e9:af:4f:c7:29:02:14:a9:62:8f:d1:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:6C:80:56:F3:E5:CA:83:35:19:93:43:E8:8D:FE:29:8A:4B:0F
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:e7:66:7a:94:64:5e:47:93:3d:a8:a0:d9:55:9b:71:1f:
03:87:ce:35:d1:39:53:1e:63:c9:60:0b:ba:00:4a:29:35:76:
1e:71:bf:3c:72:5a:32:69:df:8f:4f:cd:e5:b4:c8:7e:d9:4e:
92:08:46:8d:94:eb:32:f7:27:a1:08:8d:d3:37:d0:69:8f:1c:
bb:6a:06:c7:73:3f:2b:ab:8a:f2:4e:0f:cc:eb:50:2f:c4:1a:
2f:90:9e:3c:f0:6b:66:46:7f:37:7b:8f:45:a6:0f:93:56:84:
43:e3:b1:60:71:6f:10:8e:4c:0c:ce:c9:7d:39:fd:1f:4e:af:
ea:b5:f0:55:6c:45:e4:b6:18:37:af:78:ec:9a:23:99:17:34:
0c:eb:06:74:1c:41:6b:ff:82:ab:9e:27:1a:5e:fc:fa:02:b7:
4a:96:21:1f:70:41:45:ee:ab:fd:28:10:b6:61:46:ad:5c:7e:
4d:48:ff:fd:44:60:13:90:91:70:fe:f4:03:55:f1:ac:05:2b:
0b:e6:23:fb:ae:16:7d:26:d7:78:2d:ca:77:2a:a0:59:17:94:
e0:dc:bf:02:96:43:da:cb:4c:61:1f:86:57:e3:4a:c0:fb:4a:
66:a0:45:54:93:08:d7:62:f3:34:54:a3:48:11:29:4a:97:e5:
3a:35:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:22 2025 by rpki-client