Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: n8+6nE8SbL//mp0f9/GNklD9gqUuupg5MEjD/bxxhpA=
Subject key identifier: 23:1B:A2:0B:88:81:21:49:F5:EF:09:C7:71:18:7B:6F:D0:86:91:65
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 0199FC588BE89A8CD470E10E05FEC4A65DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 1194
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: AzsqIpyibXcfr8Q1s2CzgDBQzrXr5BipfplZzCdKQ8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8b:e8:9a:8c:d4:70:e1:0e:05:fe:c4:a6:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=231ba20b88812149f5ef09c771187b6fd0869165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:2f:d7:77:1d:d1:2a:e6:6d:05:4a:e3:b0:
26:ea:9b:8f:12:e7:fa:08:5d:1e:39:e4:bb:1f:a0:
ba:65:65:7b:c8:47:53:87:5a:85:fc:59:eb:12:54:
a6:cf:45:02:54:a5:a5:8a:71:45:b1:26:b5:d6:ef:
5a:f9:4f:70:59:03:7a:d1:40:0f:d0:06:9d:5a:eb:
ad:43:68:fd:3d:2a:fe:80:50:d5:a4:8c:55:87:8e:
0e:ad:0e:01:28:0e:36:36:88:d1:63:67:da:00:ce:
62:57:55:c7:bf:d9:4a:24:9c:59:57:37:1a:3b:26:
11:51:95:5f:fa:b6:0f:6f:21:6e:5d:0c:ed:bb:98:
87:0c:3b:46:73:31:0d:2e:2f:eb:18:4e:e4:89:0a:
6a:91:92:1f:23:ba:74:01:d1:e8:cb:56:6e:f3:40:
d9:71:93:9f:a4:26:e6:fd:79:5a:09:b6:d2:07:8e:
c7:be:a3:6a:0a:cf:66:cd:67:36:25:a5:fe:c5:b5:
00:69:20:a3:fa:2d:66:05:22:94:df:2c:5b:2a:57:
ca:2e:a4:9f:70:77:ef:ee:a3:f9:37:3a:23:d7:16:
ec:ef:f7:36:ba:39:59:e2:34:a5:9e:6d:ac:98:2c:
12:38:f2:18:09:05:01:a4:21:2d:78:e8:0a:31:4c:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:A2:0B:88:81:21:49:F5:EF:09:C7:71:18:7B:6F:D0:86:91:65
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:ae:f2:b6:82:93:12:05:dd:40:3e:51:b2:86:82:1a:5e:
d0:15:94:b5:0e:0f:f7:f4:3c:54:9e:02:02:e4:47:f1:62:04:
aa:b3:c0:a8:3d:cb:65:80:8b:71:9f:d9:e2:e8:d6:77:3b:0d:
ac:89:2f:0d:b1:1b:fc:ec:c0:96:10:28:9b:7e:03:d6:83:5a:
22:a1:2a:8c:32:7f:74:8c:53:9c:cc:fa:78:a6:e8:44:19:2d:
c6:a5:c7:a5:7e:14:1e:eb:b4:8d:a2:da:ba:3d:71:65:bd:38:
c8:ef:f6:0e:94:da:2c:17:14:fd:fa:61:a7:8a:e4:50:a7:80:
b6:41:9c:3d:d5:63:3a:8d:dc:7d:93:3a:f5:ad:a0:0a:59:37:
ed:72:92:24:df:90:d8:26:aa:1d:0d:ec:0c:81:3c:a5:48:ff:
c7:3a:e1:c4:d0:a8:7f:39:d9:a0:cc:ac:f5:98:f4:cc:8f:ca:
32:ff:c0:19:9b:7b:0b:8b:21:ca:89:65:ed:ce:81:b7:f5:e4:
4b:ec:5c:f0:43:91:ba:68:e0:35:aa:9f:bd:25:66:d4:98:64:
5f:dd:b8:e7:81:79:53:ee:99:69:37:1b:35:f7:31:f5:e0:38:
16:ef:7e:5d:73:c9:04:e3:c8:be:6b:66:3c:4f:3d:a9:70:89:
e8:cb:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:59 2025 by rpki-client