Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: A29FvvytTcvb0Iots7T1baVIa36jXxJMm3o+9ik8/ig=
Subject key identifier: C0:17:9B:FE:C0:7B:B8:4A:D3:D3:D0:F2:BE:42:01:2A:2E:02:A7:C5
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 0199FE7DE885D161FB0465C66158FA4ABA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: /cN8m7lwFA/9W0ozzF3slVwL8WNkdmf/GIPuz7L5E70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e8:85:d1:61:fb:04:65:c6:61:58:fa:4a:ba:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=c0179bfec07bb84ad3d3d0f2be42012a2e02a7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:58:b9:49:a0:2b:77:5e:b0:1b:09:51:3b:
f9:4e:55:c2:08:3b:5d:ec:b1:50:cc:13:df:27:7b:
40:ed:02:be:a7:48:f1:fc:09:c3:71:ba:31:7f:d7:
cc:6a:68:f9:ba:b0:49:12:2c:be:18:1b:e2:15:74:
37:44:0a:8b:0e:88:b2:b1:bd:8d:59:4d:c1:01:e2:
84:ab:b1:82:67:bf:1f:23:23:2c:7a:a2:c2:c6:e2:
64:ec:11:43:9e:58:13:d1:34:94:a0:c4:bf:e9:57:
7f:55:e6:7a:25:da:c8:2c:f7:fd:65:e9:3e:b0:6a:
df:cc:dd:5a:c8:58:74:40:66:ae:9a:35:92:b4:22:
a1:22:f3:da:39:6c:2a:e7:bc:73:d9:3a:af:8d:cd:
25:95:a3:f2:b6:06:e1:b2:86:55:ad:b5:09:87:92:
30:d9:c5:d0:00:01:7a:08:72:d8:09:27:58:43:94:
56:80:a6:89:49:ad:f3:51:ea:ec:f3:3a:75:0c:81:
53:e8:fb:5e:14:48:80:7a:b7:0c:2d:ab:bf:c7:06:
f0:b3:25:d2:dd:c5:28:9b:9f:85:e4:9e:4e:58:fd:
47:56:2a:04:c4:c2:73:58:2b:3b:89:1d:04:ce:fa:
3e:c9:48:b1:a1:29:40:a1:77:47:e9:65:45:64:17:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:9B:FE:C0:7B:B8:4A:D3:D3:D0:F2:BE:42:01:2A:2E:02:A7:C5
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d3:47:c6:01:83:24:b8:f9:07:14:53:d5:ae:a5:9b:30:98:
33:cb:4f:79:d5:84:cf:d9:7d:e7:ef:0d:21:18:84:85:1d:38:
f2:64:d7:17:f3:78:cc:d6:64:c7:b3:f8:de:3d:6a:53:d9:bc:
46:6a:97:14:f9:1d:45:91:20:17:67:6f:26:d6:0a:4c:07:30:
cd:15:77:03:4f:98:63:0c:44:04:82:34:5b:b6:51:9d:ad:d4:
ff:fb:29:75:5e:12:77:de:44:9f:84:6f:51:3d:27:ec:73:8f:
b9:0f:ac:0b:04:b7:95:17:0a:7f:8f:c8:70:ce:d0:f5:6f:df:
35:ac:08:63:06:69:60:94:6c:c1:0a:a5:2b:ae:17:38:ab:ce:
fe:af:20:30:0e:61:e5:7c:48:82:e1:b0:a1:32:7a:40:fc:82:
e8:79:bb:48:08:00:9c:30:07:04:90:ef:b1:f5:d0:e5:dc:46:
f6:8d:e5:9b:20:c4:d2:a7:9c:26:c8:4a:f1:81:cd:6a:28:27:
c3:91:27:b7:26:16:ff:60:96:64:66:08:86:d1:26:bd:9e:e1:
1a:80:99:d5:a2:4e:2f:37:ae:ee:b8:7a:70:46:bf:e7:27:4e:
79:5c:af:4b:96:f0:16:a1:2b:10:8b:d4:55:0a:81:44:5c:81:
3c:f2:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:30 2025 by rpki-client