Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: h9WEM5exYyf+3w4rx1n06VSmJI7U86Pg3PFUAwwY3yg=
Subject key identifier: D9:94:1A:92:6D:24:CF:C3:35:07:4D:5E:09:49:0A:AE:48:A6:5C:44
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 0199FAA127DCE9CFD4AEA7B73727E78C6CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 090A
Signing time: Sun 19 Oct 2025 04:01:29 +0000
Manifest this update: Sun 19 Oct 2025 04:01:29 +0000
Manifest next update: Mon 20 Oct 2025 04:01:29 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: oOOUbq28jJF/q5TzZKpSK4sxT0W/9K/FmWRFgKVEGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:27:dc:e9:cf:d4:ae:a7:b7:37:27:e7:8c:6c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Oct 19 04:01:29 2025 GMT
Not After : Oct 20 04:01:29 2025 GMT
Subject: CN=d9941a926d24cfc335074d5e09490aae48a65c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:36:14:02:f6:3c:5a:98:fc:55:26:ee:3d:
74:6f:fd:d6:ac:69:8b:39:47:bf:cf:0a:5b:e0:17:
d1:d0:95:c7:95:05:a9:d0:9b:a9:51:f6:57:fa:e3:
c0:20:36:65:9f:b7:a1:c4:20:81:f1:49:34:25:c1:
52:60:7f:44:08:ec:dc:ae:e1:38:16:7c:d5:72:1e:
89:55:0e:50:68:73:a0:96:bc:dc:1e:cc:2c:c0:62:
aa:7a:8d:d0:2c:bb:be:9c:85:bb:49:76:f1:26:2e:
38:96:b2:8a:d7:01:23:43:39:ad:3a:53:73:b7:f4:
5a:67:20:67:3e:30:00:62:19:49:a1:0e:9b:61:13:
a6:d5:6b:d9:e1:99:0e:91:55:1f:88:4e:81:57:04:
f6:a3:f5:ab:79:cb:7e:c7:e6:98:aa:2b:9a:1f:51:
34:58:ab:b4:a9:7e:de:42:24:6d:fc:d1:70:b6:06:
95:71:86:c7:72:55:fa:ad:cb:83:df:41:54:b6:b5:
6c:35:f7:d3:13:e9:ee:5b:7c:d0:26:10:6b:f7:ac:
54:f1:be:b6:8e:42:1f:bc:a7:5f:47:e5:d2:dc:9b:
ef:0e:4a:80:26:88:91:9e:51:aa:f4:3d:d6:42:6a:
70:49:59:cb:d3:49:7f:65:77:19:26:5d:7e:9f:7e:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:1A:92:6D:24:CF:C3:35:07:4D:5E:09:49:0A:AE:48:A6:5C:44
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:d6:70:f9:71:c9:b9:63:cf:96:5c:9d:c8:83:4a:54:5b:
ff:5a:ee:77:3b:21:e8:b9:11:82:3c:c9:96:84:a5:46:85:18:
2a:b5:b6:f3:17:18:cb:8e:99:a1:7d:02:62:b0:00:45:4e:d2:
e2:a0:4c:97:f2:ee:d2:bd:35:4d:18:a6:77:e4:47:d4:75:dc:
4b:3d:d3:35:43:28:bf:97:ea:96:13:9f:8f:4a:3b:9f:ac:69:
00:43:5a:71:21:ee:40:6c:a9:e8:30:30:2f:72:b4:b8:a8:39:
8e:d2:f5:20:be:dc:b7:28:a4:18:c1:2d:95:a7:c4:ab:f6:68:
43:cb:1d:aa:7c:c2:01:a3:e8:99:8a:c7:6f:39:29:01:6b:58:
c7:af:25:f2:0c:17:6e:40:5d:12:a7:44:c9:65:1b:df:a0:ef:
7d:bf:1b:55:93:cb:b4:30:a5:b3:cd:95:0b:58:56:40:bf:e6:
66:1f:65:a2:5b:82:9f:17:b1:d3:fd:7c:e4:e4:b3:2d:39:e2:
49:8b:49:dd:b0:90:bb:5c:33:9f:1d:3a:a0:46:bf:23:a3:03:
61:84:65:09:fc:cf:ff:03:f5:51:b0:1e:de:5b:9d:74:35:19:
09:07:83:5d:0f:8b:1e:fb:b6:fb:3d:d4:4a:1e:38:20:91:f9:
fd:25:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:00 2025 by rpki-client