Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: eCw3Mbs3ar6Hdf2IfW696ishZ9IEqIiM9b5qtth/uLI=
Subject key identifier: 8F:8D:C1:5F:97:90:45:E0:E1:A8:C6:E9:F4:12:DF:3A:8C:B5:D7:A1
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 0199FBEB1A6DE03872BE4ED8199D2A073199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 05F4
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: CKayKwL829OfN5+BRFhYIun/KEynoajnhZt1TTDTlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1a:6d:e0:38:72:be:4e:d8:19:9d:2a:07:31:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=8f8dc15f979045e0e1a8c6e9f412df3a8cb5d7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:c3:91:d5:52:df:9d:8f:25:ff:4d:b9:71:
57:aa:ad:b0:ec:87:ef:36:75:c4:bd:51:c9:61:bb:
0f:25:d7:d2:85:ea:ad:f9:7f:fe:29:8e:a7:c1:32:
c8:da:31:99:84:91:3b:7e:ed:31:3b:07:a0:f3:8d:
3a:a8:d9:ed:6a:71:37:f3:cc:87:35:4e:11:9b:24:
47:ad:3d:23:8c:08:a9:41:ff:3a:cd:3d:9e:80:46:
1f:ea:76:05:c1:9e:8b:a8:9e:11:24:7d:d2:a8:ac:
a0:22:ff:65:69:31:ce:db:cd:3a:34:52:67:ca:9f:
a0:c1:19:5f:7d:05:b2:e0:54:ec:2d:93:c2:fb:31:
ce:47:49:90:37:79:2b:55:ce:d2:f3:6f:58:85:fc:
8c:35:94:8f:80:4d:a3:54:f1:d4:56:2c:22:b8:04:
64:dc:b3:37:46:37:f1:a7:ae:90:14:5b:9b:3c:c9:
14:09:97:54:e7:06:98:e3:8d:d9:da:b2:80:26:a7:
4a:db:df:13:ab:10:7d:73:fb:c6:cb:65:a8:3c:21:
0d:7d:b7:08:b8:5a:38:08:55:5e:21:db:f1:d9:0e:
a1:1e:6a:9f:13:91:75:18:ee:2b:16:1b:78:1d:6f:
7a:cc:76:62:e9:9d:cd:4c:0a:c7:99:11:53:3d:e7:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:C1:5F:97:90:45:E0:E1:A8:C6:E9:F4:12:DF:3A:8C:B5:D7:A1
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:6d:c8:47:e7:a7:2f:3a:4f:3b:43:32:ed:a1:7b:bd:12:
c2:19:34:34:8f:16:f2:44:27:05:b6:7f:3e:19:ae:e8:aa:fb:
96:8c:e3:69:2c:ae:3e:10:ed:17:d2:44:37:19:a7:25:05:61:
af:a4:95:80:5a:3a:91:5e:99:d0:20:dd:ac:6e:6d:04:0f:af:
43:4b:d6:f2:e9:97:1a:e6:ed:91:63:ec:40:9b:48:7b:2b:12:
57:17:ef:da:b6:97:fe:56:d4:18:f8:68:fe:a8:9d:75:b3:51:
03:30:ad:8c:4e:5a:4a:21:fd:28:68:db:b2:46:74:61:b2:15:
f8:a2:96:a5:93:8a:9c:90:d3:90:9a:bd:15:92:12:65:e6:64:
57:39:62:97:d9:8a:68:77:38:67:8a:fd:57:5a:e8:79:1f:a3:
20:45:a4:11:a3:91:e8:68:d7:bc:b9:ca:08:be:ff:7b:80:f8:
58:2c:4d:cf:96:8a:0d:8c:92:69:b4:82:50:92:03:fc:d6:b3:
79:fe:1f:6f:31:c6:08:25:1f:e4:c3:93:a9:4b:d2:6e:f0:ca:
fc:77:23:15:e5:87:56:cc:dc:c6:f7:e4:f3:17:bb:28:fe:87:
75:b8:38:e0:8a:87:bf:ff:47:24:00:1d:81:6e:10:4c:27:d1:
f7:cb:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:08 2025 by rpki-client