Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: VfSj8eApO/dmw3Oz//vlu9VT6kkvMXzeijU0cdATm3M=
Subject key identifier: 40:BB:A5:8E:0D:83:71:1E:0E:EB:34:1F:7D:9A:4A:F2:43:E3:A5:AC
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01987ED3F3B4721E31A9E0DA1EBA40E5A16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0A92
Signing time: Wed 06 Aug 2025 10:01:16 +0000
Manifest this update: Wed 06 Aug 2025 10:01:16 +0000
Manifest next update: Thu 07 Aug 2025 10:01:16 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: qlYiNxjXLfep/WB66MwWHb7Mx65Rwtp7te+huSZfVzc=)
2: K2QKbFHIrbPQHIm8s3ODKVNUlZc.roa (hash: wWrjDFQ0Y6Ae5UJU72q02nMygpERqME7z4/Cv+3ZVV8=)
3: junb4Hu7skcDtoWuQpLCf11hPIk.roa (hash: WDV6wqg1Z11gLdLlJ/tRkdmj0uUMTkoiQFmb7Lj/0IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:f3:b4:72:1e:31:a9:e0:da:1e:ba:40:e5:a1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Aug 6 10:01:16 2025 GMT
Not After : Aug 7 10:01:16 2025 GMT
Subject: CN=40bba58e0d83711e0eeb341f7d9a4af243e3a5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:39:9d:55:59:1c:4f:fb:ea:19:c6:ed:80:
25:a3:fb:91:8a:c6:c0:b5:19:58:d9:89:3f:39:69:
c4:4a:77:79:72:cc:60:f3:63:8b:e5:9b:13:68:af:
9d:35:b5:39:f6:bf:83:89:cb:16:81:ab:21:4c:ec:
03:8b:d2:b0:8f:63:a3:14:81:68:7d:0f:a7:24:22:
26:bf:b6:5b:d0:9f:69:3e:48:09:01:06:02:80:a7:
17:79:88:4e:4e:71:1c:2c:63:07:6f:f3:50:34:c9:
ce:34:c6:f4:b4:3c:df:ce:20:42:4b:3b:8f:a0:79:
6c:c9:a0:19:a5:c4:49:57:1a:f6:87:5d:7a:bc:57:
a6:6d:67:2c:35:aa:f8:62:b5:f1:4e:b3:c3:ae:65:
3f:e6:1a:9a:35:f1:26:7d:72:69:a1:6a:e7:18:3c:
83:d5:5f:1f:32:a7:ed:07:42:b4:a9:28:4d:e9:ad:
f9:c7:61:a3:35:1f:3c:68:f8:36:69:9a:1b:e7:40:
f5:96:86:23:66:68:d2:92:47:93:19:a1:c2:a0:4d:
8b:4e:8c:0f:16:aa:6e:2b:a8:3a:af:35:95:01:b2:
35:66:94:2d:25:b0:05:a4:b5:02:65:05:4b:e5:2e:
c6:44:a6:c2:09:77:a0:39:85:0f:22:a3:2b:26:a4:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:A5:8E:0D:83:71:1E:0E:EB:34:1F:7D:9A:4A:F2:43:E3:A5:AC
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:8b:7e:40:44:e3:b3:e0:b1:6a:b3:d7:31:c3:41:d2:6f:
4f:a7:a4:1d:33:d6:5e:21:6c:ba:0c:af:69:52:f5:d8:84:d6:
20:04:82:ae:ea:31:d5:14:a8:c6:65:85:dd:7f:58:53:fd:01:
61:f5:c2:d3:9d:8c:a7:b0:84:3b:bc:ff:49:f1:33:db:39:4f:
86:f5:a1:38:5a:4c:a9:2f:47:ce:b3:d8:bf:1f:9e:04:2c:19:
e8:fd:af:51:30:c8:fd:b1:94:06:45:d0:63:68:ec:57:db:31:
49:67:8f:55:1d:03:08:ef:0e:19:21:79:d2:19:fd:a6:e0:13:
e0:ec:b7:6a:d6:41:14:f9:72:0b:af:25:e8:c0:0e:86:62:a8:
e5:5d:fe:04:b0:f5:d9:13:95:a2:67:c9:e2:0e:b0:31:e1:55:
90:d1:55:f0:89:ee:cd:fb:4a:da:59:49:2a:4a:be:ef:2e:32:
ea:36:2c:3d:10:53:bb:d8:37:21:13:3b:a4:3d:30:ca:0b:a1:
71:51:d1:5b:4e:b7:e3:31:33:26:b1:3f:9a:51:1b:16:79:e7:
d3:7c:d6:3f:1c:7f:99:85:3b:32:22:0d:61:af:c3:ef:2f:3e:
91:72:f2:f7:72:da:01:29:bc:c4:7c:fa:40:a9:8b:64:21:ee:
64:b8:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:21 2025 by rpki-client