Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: PjihZIBt3C6d7aKO4U/8Xh3RaMa9lz+gi3d36xGexYc=
Subject key identifier: C5:BA:93:DD:DE:AE:29:D2:05:28:46:A2:28:EE:34:1F:CD:0A:B0:86
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 0199FC213ECB9D910B34ACD8A35F625ED030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 1216
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: bMpjaZxyNmtHxmdrlyDtRbVHPOw1RJCbGpb7GwTzGnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3e:cb:9d:91:0b:34:ac:d8:a3:5f:62:5e:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=c5ba93dddeae29d2052846a228ee341fcd0ab086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:81:64:45:a2:b1:34:79:24:57:08:b1:fe:
c7:4a:13:eb:5f:0b:6e:e7:25:e0:8d:40:0a:b9:6e:
4c:3c:7a:7f:ce:0b:27:e4:74:d8:50:a1:01:f4:7c:
c8:39:42:66:13:54:29:85:4f:1c:36:bd:2d:7d:ac:
4f:69:30:32:2c:4b:ac:6c:79:19:7a:6b:85:74:98:
70:19:b9:64:c9:67:e3:64:d2:14:1d:71:6f:79:38:
c5:f1:20:00:5f:34:63:fc:ec:23:7d:9c:c9:f5:bc:
94:cd:a5:3d:84:b5:b7:e7:82:31:ae:37:cb:dd:e7:
71:9e:e8:1d:69:68:63:42:85:23:bd:f8:4c:04:70:
a5:b5:75:65:36:98:42:e9:78:af:4a:85:2c:17:6d:
95:24:d1:2a:98:c6:db:06:7f:36:14:e3:91:82:ad:
f0:d5:4c:76:c4:01:c5:8f:71:4a:f6:5a:36:3d:3b:
66:d5:73:b7:f5:3f:9d:db:19:02:62:0d:e1:b7:c2:
91:76:f5:80:17:33:52:75:4e:56:bd:40:21:af:4f:
b1:5f:bb:9d:4f:15:b2:ba:87:a1:a2:f3:82:d5:35:
95:ed:64:47:3a:8f:0f:45:aa:e5:f3:fe:2d:d0:7f:
30:e3:93:09:77:b9:75:9a:0f:d6:31:b8:8e:20:a6:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BA:93:DD:DE:AE:29:D2:05:28:46:A2:28:EE:34:1F:CD:0A:B0:86
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:22:45:29:70:bc:62:6f:80:9b:8c:b1:02:1f:31:1b:8a:b2:
45:03:96:1c:03:da:52:53:59:d5:18:cd:12:6b:c6:9f:04:1d:
62:a0:20:92:36:eb:9b:08:6d:20:13:73:eb:84:ed:8f:38:04:
8e:52:67:37:0f:54:ce:30:7d:f2:49:96:ea:60:42:b2:28:2d:
bd:cf:1a:7b:03:4a:c1:a8:10:32:70:d2:e1:86:83:80:70:f2:
35:62:7f:b2:45:3b:5e:cd:ed:dc:75:da:c0:53:95:46:1b:b0:
3d:3d:3b:c8:c1:63:f7:6b:79:1c:e8:47:4f:13:3d:d1:18:e1:
c7:3e:93:9b:63:ce:09:07:7d:a6:32:ff:95:16:6f:25:37:5c:
40:50:56:48:7c:a0:1c:85:1b:bb:b6:1b:31:22:03:40:02:48:
03:01:f6:d3:0f:7b:55:79:35:ce:0c:f4:35:3e:01:31:8f:bf:
14:6c:62:ee:12:02:1e:6f:89:1c:ed:b2:16:b5:90:b7:0e:ee:
0e:9a:9c:0d:f9:aa:c4:27:94:aa:88:9d:c8:26:e1:3d:50:30:
07:03:c2:87:a9:a8:ea:09:b3:be:2b:a6:60:9b:cc:74:91:e3:
2d:8a:cd:61:88:44:11:8f:50:9c:61:fd:c7:a6:1f:af:4a:8b:
d7:09:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:45 2025 by rpki-client