Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: t26Nchxg2pr7MhLuJTKjHPd490sAPavgC8P/ZLXG408=
Subject key identifier: 16:01:D6:CD:79:4E:14:32:29:95:DD:E4:88:18:13:0F:63:2D:25:83
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0199FBEC357ABC2B14A76B43D260FD5C241B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0A28
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: Sn8Gm1K975O2StvweCtABcjh5R37Y7970k13ra7YkEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:35:7a:bc:2b:14:a7:6b:43:d2:60:fd:5c:24:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=1601d6cd794e14322995dde48818130f632d2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:56:90:0d:68:dc:6e:7d:7b:51:62:8d:27:
32:8c:e6:7e:c5:28:bd:5f:32:b5:ba:12:b1:bf:2b:
09:fc:64:a0:d7:7d:ce:27:27:53:ab:5f:45:52:96:
ba:98:66:cb:e3:2e:93:24:c5:2d:39:75:48:e0:fe:
24:5e:53:58:0d:ac:bd:c8:8b:94:ab:5e:af:85:a0:
60:21:1b:23:9f:42:25:c5:31:21:f9:a1:61:0e:f3:
ab:e3:54:b2:67:6a:78:a0:4a:36:7b:5a:e5:c4:64:
dc:27:95:a3:bf:f1:c8:5c:0c:c0:92:f8:62:a8:6d:
9c:40:f6:b8:a4:f9:15:ad:71:57:70:5c:f2:9a:69:
50:50:e5:08:f0:c3:6d:22:42:05:26:0d:e6:78:50:
a9:c7:39:a7:ba:ff:b5:a2:e9:d8:1d:09:7a:93:5e:
a6:67:db:de:66:a7:89:24:9a:42:bb:8e:35:78:3d:
82:bf:c6:c1:79:87:67:6c:b4:c8:fa:7c:c5:9c:4c:
d0:7d:4f:9d:25:57:55:90:0d:b4:e5:8c:59:30:c7:
40:a3:b8:31:56:61:98:a8:82:86:0b:f5:cd:48:11:
11:f1:e2:e7:2c:bf:f0:d0:58:1a:c0:eb:69:bd:d1:
0e:ff:f4:a8:3e:b1:7c:b9:d5:c9:7f:0d:c6:83:0c:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:D6:CD:79:4E:14:32:29:95:DD:E4:88:18:13:0F:63:2D:25:83
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:c1:49:1c:62:53:52:11:6c:98:c9:b3:9e:91:90:9d:57:
06:bb:33:88:e7:c8:9b:88:bb:ca:d2:f8:c0:05:13:21:58:1a:
44:6b:af:4a:d7:04:2c:10:8d:a0:df:d1:47:e7:6a:66:56:f3:
45:b3:e0:1c:56:8c:fb:0d:65:b5:b1:d1:9b:c3:c2:f7:29:ce:
da:e6:0a:66:13:1d:eb:d9:6d:a5:3a:12:08:c0:f8:6d:f4:92:
21:76:b5:bc:be:ae:38:1b:0c:df:6c:82:53:de:81:24:c5:f2:
7e:b7:25:ba:9f:8e:d7:19:03:4b:41:5a:5d:c6:67:72:aa:6f:
2f:73:b6:92:b5:a8:6e:e7:01:e0:1a:92:03:d5:5e:ed:46:cd:
e1:c9:66:83:e6:b0:11:c3:a2:d6:68:1a:8f:f6:9a:99:b4:0d:
ca:ba:20:69:9e:08:44:30:8b:cf:f7:72:90:73:2a:7d:a0:c0:
1b:58:d6:a8:79:cd:2c:64:b6:f9:ab:53:67:96:17:e0:dc:24:
88:46:4b:82:97:a5:ba:49:dd:cb:38:d2:2b:4a:e3:6c:11:4d:
bd:b2:a4:30:1b:0e:49:e6:be:ba:19:ce:6c:49:3a:d1:3b:12:
35:cb:50:31:78:b6:20:1e:76:42:18:7f:d5:23:19:0e:1a:16:
b4:3e:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:13 2025 by rpki-client