Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: w449w4ot37zO5l83sA/WY5WJ+f64uT9rrGMDRngwX4g=
Subject key identifier: DB:9D:D6:EB:21:A6:4C:69:F1:73:7F:D1:CA:82:60:A8:28:8B:82:CB
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0198737466C230E33FE729ECEE53C3BBFA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 07A7
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: lXCAutQ9KRxVeabdlmbah+Xzr4ZxotiEIsLOxN/7vY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:66:c2:30:e3:3f:e7:29:ec:ee:53:c3:bb:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=db9dd6eb21a64c69f1737fd1ca8260a8288b82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:20:63:eb:10:8f:5a:eb:87:4a:5b:70:f9:
a0:6d:d2:ea:a8:15:3d:61:74:4c:b5:8d:4b:04:e5:
47:2a:f1:8c:de:a3:f5:ea:c2:40:5e:ad:b3:be:26:
1f:39:08:b9:d7:c8:7b:4e:95:9f:40:21:07:a8:17:
c1:2f:09:fc:ba:40:b0:ef:c9:e3:6d:2f:b7:f2:21:
94:d8:16:69:41:41:8a:fa:87:47:0b:3b:75:61:7e:
28:fc:66:04:d0:e2:66:66:b1:ed:37:ff:a6:dc:63:
e6:9e:7c:2e:f6:d8:4c:2b:01:08:02:75:0d:ae:ab:
a2:ad:bd:90:15:c4:6d:93:79:46:22:43:85:57:f3:
bc:a2:8d:4f:67:0a:49:c2:4e:3a:61:1b:b2:7c:30:
4c:30:56:44:7e:21:0b:2d:f1:74:85:c5:88:14:71:
40:61:f5:92:58:66:af:4f:a7:32:21:15:5f:7a:8e:
02:27:b3:7c:91:f2:36:9f:4c:09:b5:86:73:bd:e5:
7d:03:6e:ca:b0:ee:01:a9:db:87:0c:28:35:c2:2c:
a1:dc:b9:78:af:d5:b6:7d:be:eb:8b:15:3b:7d:ad:
0c:41:55:e7:e3:72:3d:a6:fe:96:1e:d1:50:1e:d1:
be:30:3b:b4:96:b0:6f:07:06:2f:5d:6c:fc:27:b2:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:D6:EB:21:A6:4C:69:F1:73:7F:D1:CA:82:60:A8:28:8B:82:CB
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d3:b3:60:ab:9a:56:18:58:3e:67:3d:1f:fb:59:08:5d:5a:
8f:af:4e:46:4a:87:46:cc:fb:ce:7e:b3:6b:3f:92:e9:7a:da:
12:37:bf:de:f6:bf:fd:a6:36:bd:7f:ed:d9:16:e8:b9:ec:77:
c7:d7:3d:cf:ef:7a:a9:b5:b4:e2:f9:1c:aa:2f:00:ea:40:7d:
9a:db:f6:34:3f:f3:e0:e6:c5:a1:d8:ed:aa:87:aa:f1:ad:ab:
d2:ad:80:3e:22:fe:82:41:a7:de:37:0f:7a:18:c8:06:bd:c0:
2b:97:e0:9b:bd:ef:78:20:39:11:59:50:90:54:d4:6a:9c:d5:
61:62:2e:dc:22:dc:97:a4:87:6d:00:af:91:54:27:ff:c0:fc:
da:71:db:1d:e1:68:8f:46:31:02:be:7b:ac:1d:5b:48:60:9a:
9b:ad:57:f7:31:c1:fc:ae:15:f1:6c:f3:1e:84:26:07:dc:5e:
a1:b2:f7:9b:3d:24:14:3a:37:e8:33:e5:6c:c3:62:17:68:c2:
bd:81:a4:32:ed:c5:c8:fb:ce:11:ca:ac:79:82:05:d7:b3:c7:
7f:5e:80:b9:b0:54:2c:53:ef:f3:c5:a7:a6:c6:6b:29:16:09:
ec:17:7b:aa:18:56:bc:9c:b9:9b:41:d0:d5:e0:e5:75:cb:d1:
44:b9:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:31 2025 by rpki-client