Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: aA1MIzh9iljwY7HBxYFBkEZNeAZwcyclaqav/kR+szw=
Subject key identifier: 21:45:C4:01:7A:32:3B:10:41:AC:3E:4D:77:4F:7E:A1:22:A3:4B:EC
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0198D47253B65C3BCF21908D05CA7F0B383E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 098F
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: BxThWbbGSmTmDgFQS37JmnHs50fmwFNlhLyF0riYgqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:53:b6:5c:3b:cf:21:90:8d:05:ca:7f:0b:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=2145c4017a323b1041ac3e4d774f7ea122a34bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:0c:e7:6b:36:a3:82:3a:52:db:56:2a:8b:
cb:71:bf:d2:24:61:1d:77:96:4f:a8:14:3d:05:a4:
aa:da:9f:8e:7d:95:69:3e:0c:b5:9d:a9:b8:56:8f:
f4:3b:9f:4e:90:85:cb:8b:4c:7f:b2:79:5a:4d:88:
97:34:48:0c:ca:5e:83:af:b8:36:2b:c5:c9:22:4b:
1b:02:54:04:04:b5:30:cb:b7:ab:d9:0e:df:2c:74:
89:18:96:6d:06:14:b7:ea:b9:7b:c4:20:e2:0f:ff:
b3:fd:d9:02:dd:82:e3:8b:0b:7c:0e:97:5e:96:71:
bb:dc:ec:fe:10:20:ee:b4:5a:bb:d9:a4:5e:c0:19:
96:75:96:1a:94:c3:99:74:5b:ac:27:80:bf:a2:de:
b2:5a:f2:ac:26:be:fd:8b:d7:12:e2:90:ea:a6:62:
61:f3:2f:4f:fc:cf:80:23:67:00:09:7e:44:3a:e2:
a9:b7:4a:6e:0d:e4:5c:1e:e8:e8:b4:0b:85:b9:10:
80:eb:cc:32:83:ba:4c:40:4f:c2:2b:ca:3a:64:ef:
81:d6:00:2a:7b:b9:d5:7f:0f:ee:eb:d5:72:86:fe:
1e:c0:4a:43:2e:94:d0:e4:00:52:a3:49:ca:6f:1b:
7a:05:91:2e:03:72:76:39:4e:12:a0:57:12:6c:35:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:C4:01:7A:32:3B:10:41:AC:3E:4D:77:4F:7E:A1:22:A3:4B:EC
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:1a:bb:36:4c:46:85:4d:43:03:97:b0:57:1e:7d:41:22:
1d:09:08:80:10:76:5a:d5:56:c0:06:b7:3f:47:4b:6e:f8:39:
26:9d:de:c9:7d:ac:b7:79:fa:9e:7f:ff:9e:5e:f0:5a:41:05:
86:65:e8:1f:01:35:fc:bc:1e:fb:5d:ca:af:cd:a7:c2:67:a3:
1b:68:bc:e2:cd:6b:a0:aa:14:35:dc:42:0d:27:f8:dc:7d:38:
e8:5d:bf:81:f7:15:f8:ec:5d:5a:1a:a3:c9:18:ea:63:29:07:
33:7c:81:c5:b7:22:54:b4:a0:c6:6c:fd:66:81:33:1c:58:e9:
94:a5:29:63:02:ef:3f:cd:af:ef:c3:69:b1:4d:a2:e9:f5:68:
5a:58:ad:73:90:8c:45:7d:ba:9a:50:a0:fd:b7:56:e3:50:1f:
fe:81:96:be:ef:ac:be:73:a4:d6:15:37:cf:5f:03:c3:f9:c5:
6b:7e:62:94:5e:88:c8:b7:63:03:30:92:ba:fe:57:44:9d:fb:
33:6b:01:9d:dd:27:b4:4a:db:99:ca:4d:16:17:61:4a:71:be:
9a:32:03:bf:33:02:06:eb:b7:d8:5a:79:85:61:8f:e9:dd:61:
43:6c:1b:cf:e5:24:1c:35:df:24:8e:9c:dc:78:f1:e4:c2:63:
45:0d:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:36 2025 by rpki-client