Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: s2TVbXU4TBC0ytltt5XWrU5oNI6UCdJ8DFWpzGGSawM=
Subject key identifier: 5F:59:91:EB:5A:5E:FB:E2:5E:1E:45:52:36:90:F5:D0:11:09:7C:31
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01987298A0AAB844DAD888D859B8D6FCAC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:01:01 +0000
Manifest this update: Mon 04 Aug 2025 01:01:01 +0000
Manifest next update: Tue 05 Aug 2025 01:01:01 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: PR2aik3Ue8TvgwhZ95wbI+wb69mUIeCe7fh2tv5Qyro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a0:aa:b8:44:da:d8:88:d8:59:b8:d6:fc:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Aug 4 01:01:01 2025 GMT
Not After : Aug 5 01:01:01 2025 GMT
Subject: CN=5f5991eb5a5efbe25e1e45523690f5d011097c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:69:16:23:f9:13:62:36:6d:56:e6:90:22:
de:91:bd:91:6f:a9:e4:e3:b0:72:34:b3:0d:6e:28:
70:59:94:31:e5:1d:5e:d3:b9:1e:ce:07:90:52:fd:
f9:ba:6a:12:1b:b0:67:e4:19:ad:70:f2:45:8f:e9:
27:3e:2b:3d:5e:05:cb:71:13:d6:4e:ff:47:b7:c8:
b1:48:7a:9d:c1:41:43:f5:46:d3:6b:03:31:03:ae:
bd:7d:e8:73:1b:f7:2e:0a:7a:9e:17:92:8f:34:a6:
ac:04:57:9c:bd:19:4f:9b:a8:31:2c:50:69:d7:4d:
09:7a:75:09:28:7a:3b:57:0d:9f:34:af:d3:32:0e:
94:72:6a:a1:36:20:ef:bf:59:fb:2f:97:a7:c6:3e:
08:34:fb:62:19:4c:ad:6f:a2:1f:82:b5:21:45:67:
88:fa:9a:0b:84:f4:90:9b:8b:d2:ad:40:18:b6:79:
57:f1:28:bf:8b:dc:68:0a:e5:03:74:9a:8f:3e:af:
37:8d:a2:1b:07:54:30:6f:ad:1e:9a:3c:eb:f0:d9:
b7:ce:f6:ce:2f:66:2f:87:a7:78:0c:e3:7f:1d:78:
69:bd:0b:7c:b3:f0:34:b7:43:fd:1d:2f:0f:3e:9c:
53:15:18:c3:ac:74:c1:7e:a5:a5:6e:19:85:25:e5:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:59:91:EB:5A:5E:FB:E2:5E:1E:45:52:36:90:F5:D0:11:09:7C:31
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:be:87:2f:64:8f:11:f8:72:ef:c3:b9:1b:94:19:34:d1:
47:d0:b4:c9:e8:2d:f9:92:d0:2c:9f:f8:bd:46:d0:00:dd:bb:
f3:db:60:cc:21:52:ec:bc:82:a4:1f:38:e7:35:22:04:5b:31:
e4:ba:80:bc:cc:fa:a0:b0:6f:ce:da:02:90:5c:da:7f:f2:46:
ce:9b:43:e4:45:bc:8a:e4:cd:49:8c:0a:7c:bc:d9:aa:17:e7:
86:b4:8d:2e:1b:81:2d:82:5d:e2:c0:cc:d3:18:32:3c:74:52:
f3:e6:4d:26:11:11:30:bf:ae:90:0d:91:1a:b2:94:69:58:3c:
6b:88:e9:ef:36:54:89:4e:76:45:36:93:b1:f4:fa:63:89:95:
6b:af:4f:14:35:c8:83:77:ee:8f:1a:b1:89:c2:af:92:ad:ae:
f4:d5:5e:ae:e9:77:64:b6:41:29:f3:c8:04:c1:97:82:4d:9c:
c0:df:4b:21:24:18:06:df:a9:e1:d2:3a:9f:ea:c4:3f:c9:9a:
0f:10:2d:38:74:da:3a:d4:e2:1a:2d:40:51:6f:19:4b:d6:63:
95:5e:bc:b6:95:1b:73:36:0b:01:c4:bd:8a:b8:87:ba:66:3c:
6d:5b:b8:3d:e6:0c:e6:9f:ae:d2:1d:60:f1:d0:0b:61:06:e4:
a6:df:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:15 2025 by rpki-client