
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: k6rQE1bPETINE1vcCCfJo8A0ObNoOpRXsxTfj7q/X7Y=
Subject key identifier: F4:11:FF:9D:23:C0:9D:E8:96:2D:22:58:F7:2B:3C:15:E7:98:8B:4D
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 01987D8A7786FB5F57CC0A1D2E549FC40C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 08A7
Signing time: Wed 06 Aug 2025 04:01:23 +0000
Manifest this update: Wed 06 Aug 2025 04:01:23 +0000
Manifest next update: Thu 07 Aug 2025 04:01:23 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: No+KhOJThMZDfKr1Oc892l4Wi2O9f8EBjgkTnTcXxWM=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:77:86:fb:5f:57:cc:0a:1d:2e:54:9f:c4:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Aug 6 04:01:23 2025 GMT
Not After : Aug 7 04:01:23 2025 GMT
Subject: CN=f411ff9d23c09de8962d2258f72b3c15e7988b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:8a:d2:c3:46:0d:f2:38:27:95:41:6d:e2:
2e:aa:ef:d7:70:92:b7:79:0f:27:58:41:4c:15:48:
38:0c:e4:ba:10:64:9c:06:31:7f:c4:33:da:3d:3b:
5e:e8:34:38:d5:34:a2:ab:08:14:87:95:b2:ae:d3:
12:ed:82:1c:2c:11:5f:da:f6:cd:02:69:e2:84:79:
b0:fd:9b:81:fe:64:ed:ff:b6:45:b2:0b:32:4c:db:
4c:a6:3a:e3:01:0b:0c:1f:95:e3:96:34:34:b3:b3:
69:ae:a5:1c:0a:1a:f9:67:6c:43:57:83:ac:fd:5c:
80:7b:a1:6b:d9:d6:d9:c5:c4:71:d1:71:81:6d:78:
06:8a:09:b9:82:64:87:6d:37:a2:e2:03:56:36:d1:
1d:5e:97:a0:e2:39:24:c7:2f:88:76:57:d2:84:0e:
5e:06:f0:f1:8b:11:bc:c5:0a:11:e9:27:31:51:a4:
ef:55:90:33:d0:96:08:62:26:de:77:3d:c8:12:7f:
1a:95:0e:d5:8c:be:62:05:29:3b:62:96:b5:9c:f6:
c1:4a:d0:88:ce:0a:e1:57:17:87:28:bc:b3:e9:ac:
2e:22:2e:42:fd:2a:77:03:f0:2e:a8:41:c0:6e:e8:
c1:4e:15:1a:87:f2:62:df:2c:79:7f:82:27:9a:f5:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:FF:9D:23:C0:9D:E8:96:2D:22:58:F7:2B:3C:15:E7:98:8B:4D
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3a:be:1e:7a:83:de:ea:a3:ee:38:60:dd:74:55:37:ee:52:
29:cf:a4:91:48:07:91:9f:18:70:46:7a:5b:db:1b:bb:ef:07:
f0:6a:66:79:9b:41:42:09:30:85:3f:f1:c0:e2:f9:1c:c8:53:
9e:c0:00:65:29:c3:53:1c:b4:d2:5c:f2:34:58:b3:33:01:8b:
bb:74:09:55:0c:c2:27:9b:bf:4d:d6:dd:64:d6:d7:54:b4:d9:
cf:bb:4e:90:e9:49:c2:2a:43:b6:8a:af:7a:73:5d:2c:59:11:
76:0b:5b:a4:62:1d:85:f6:72:30:8f:77:6e:82:72:ee:ef:df:
fd:44:2d:b4:0d:cd:57:34:7e:71:77:33:ed:11:48:3f:fa:a9:
1d:3d:94:ef:1d:5d:fc:08:d1:c2:f8:56:36:50:7b:2d:d4:5b:
36:39:b3:84:5a:e3:4b:66:0e:8d:f3:b8:6e:b3:70:d8:66:b6:
b7:e7:ea:c3:c6:b5:98:91:82:cb:65:c7:eb:bf:ca:dd:90:d1:
97:6c:f9:61:07:bf:79:e9:f4:d7:b6:3c:19:fc:04:bb:9a:e9:
81:81:48:50:b4:04:ba:52:23:0b:32:93:c7:24:ed:5f:85:53:
e5:ce:46:c7:a0:ab:7c:3f:f1:20:82:ae:74:b8:92:04:ac:80:
99:1c:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:19 2025 by rpki-client