Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: Q72eKRS4p5ide1zRLqegIx+RuO0hqx/KHKXRg+13nEE=
Subject key identifier: 39:A6:AE:F4:FD:6A:05:F9:18:12:C6:BF:A6:A8:EC:D8:6A:C1:3F:FA
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 01989F039CCA180A898429E3CFFAB8D83BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 069C
Signing time: Tue 12 Aug 2025 16:01:10 +0000
Manifest this update: Tue 12 Aug 2025 16:01:10 +0000
Manifest next update: Wed 13 Aug 2025 16:01:10 +0000
Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: v8ZurXqvZcyHt8JNF8a+mmkWlwksOi0Numvg4y0tu50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:9c:ca:18:0a:89:84:29:e3:cf:fa:b8:d8:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Aug 12 16:01:10 2025 GMT
Not After : Aug 13 16:01:10 2025 GMT
Subject: CN=39a6aef4fd6a05f91812c6bfa6a8ecd86ac13ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:21:20:dd:bb:54:ba:f8:b9:e6:fd:f9:0a:
2d:78:f1:d8:5b:99:68:82:86:3d:bf:ae:40:51:90:
e7:b1:4e:fb:d2:25:78:6f:55:16:b4:04:fb:e9:dd:
7f:1e:55:70:57:2a:9c:01:f1:36:27:cc:62:76:55:
0a:75:53:7a:59:b5:a8:6c:f6:39:f7:5e:71:c8:0a:
ff:85:2c:bb:d3:93:1d:0e:7f:94:24:a9:e7:06:8a:
aa:cf:0f:cb:ad:99:4f:c9:1e:23:36:01:25:40:4a:
9b:15:01:6c:e6:35:30:64:e9:75:eb:ae:d0:fe:88:
bf:7f:55:eb:c6:30:68:e5:6e:7b:3b:37:ee:f1:cc:
a3:d1:da:4a:ed:46:21:89:64:7a:bf:40:73:63:31:
eb:91:03:48:2a:ee:cf:f1:73:2b:ba:eb:a3:b6:64:
c2:ed:4f:1f:67:7f:7c:32:11:b6:b2:28:52:c1:07:
84:d0:7a:6a:73:0b:0a:9d:20:04:fd:b6:89:6b:4e:
b1:1b:1e:db:4a:0b:17:71:eb:2d:da:f0:dd:7a:2c:
eb:bc:14:51:90:c1:0f:b5:76:85:3d:fa:07:93:f7:
6b:3c:3c:f2:83:a0:55:fb:7b:f9:07:f6:1a:60:b4:
40:b8:77:77:41:84:f8:e0:62:be:43:4c:5c:d4:26:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:AE:F4:FD:6A:05:F9:18:12:C6:BF:A6:A8:EC:D8:6A:C1:3F:FA
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:4c:5b:25:8c:ed:15:8a:76:53:89:9f:43:56:6a:8b:3d:
42:d2:ba:c8:0e:35:9b:a7:d8:9f:c5:76:26:be:e4:f0:cd:b8:
40:07:c0:6a:be:0c:1c:5a:84:e3:12:6b:b5:dd:96:68:c0:8d:
fc:69:86:14:3e:55:ad:4d:ad:74:5a:6b:68:c5:af:51:89:24:
d5:4e:1f:b6:61:eb:c1:43:7d:7d:d8:c9:5a:e3:1c:0a:d2:f6:
80:e0:89:55:84:49:d1:59:62:4f:8b:f0:44:4c:6c:b5:f3:cf:
59:f5:4b:66:b3:7d:db:24:2f:0c:fd:61:73:37:79:c6:17:d9:
bc:49:99:45:ce:20:2b:cf:f8:37:e9:e7:30:8a:89:6f:18:49:
4b:88:a9:9a:b4:43:c3:53:bf:44:9c:d4:3d:8d:9f:f3:33:41:
7d:f8:d1:e2:51:58:3c:bf:6a:d0:f5:fd:69:a7:f3:28:06:7f:
15:e8:ff:70:ab:7f:a8:19:74:17:16:d2:16:59:13:20:60:e6:
0b:aa:f8:fd:2f:b9:a4:1f:66:e1:6e:ec:f9:c7:53:1a:cb:42:
9e:c6:c9:5d:01:e5:16:34:75:f3:87:1b:c7:f0:f9:11:ad:af:
7f:4a:0b:bd:bf:9b:59:24:41:0b:c4:bb:ce:b2:05:98:3f:a3:
ca:2c:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:32 2025 by rpki-client