Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: g8WXYVuGKt/wMXEWvbwoHPwwYL61IG+XKgBOSxPkSlk=
Subject key identifier: DA:89:3F:F9:6B:C9:69:67:7E:D2:5F:DD:60:1E:CD:46:D9:D8:E0:7C
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 0199FDD9F83CE4BF87242AC73FA07CBE061E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: /w865SFdT83nqikmQKxiX0rlY53xUbBPD5MP8UCpyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f8:3c:e4:bf:87:24:2a:c7:3f:a0:7c:be:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=da893ff96bc969677ed25fdd601ecd46d9d8e07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:d8:47:3d:71:79:c4:b2:b9:2c:03:ec:87:
81:ef:7b:cb:2d:d6:88:38:41:96:79:54:97:ba:f2:
31:b8:c4:78:6f:b4:1b:7c:67:db:cb:41:59:5e:17:
b4:fe:96:01:b4:b8:6a:24:c8:2a:7b:9e:b3:24:a4:
7a:18:0c:a2:28:b2:66:e0:c4:e4:68:f6:09:f4:f0:
f9:79:f7:da:34:ba:47:c2:2f:9e:5e:b8:0c:96:d1:
bf:39:99:bd:2e:60:91:0d:d5:1c:f6:ad:87:a2:55:
5f:0b:ff:e8:e9:90:bc:a3:83:7f:75:15:cd:80:a4:
bb:c1:f6:8a:08:fe:50:30:7d:6c:12:85:45:72:d7:
e5:e4:5d:01:c1:4c:43:f7:d5:a6:49:1e:c6:23:9c:
f9:bf:a6:50:fa:7b:f4:38:c6:9b:38:b9:d2:1f:85:
6d:ff:23:12:13:4f:46:26:4d:cf:04:1c:44:c3:9c:
14:12:31:ef:9b:4e:f7:64:1f:48:6e:b1:bb:a0:2c:
fd:95:6d:20:33:fc:d6:74:3a:d9:8e:44:6b:b7:3c:
fd:9e:76:55:4e:50:71:19:53:dc:df:4f:4a:38:ea:
c2:d3:08:79:14:29:65:6c:9a:19:10:ff:ac:ef:e4:
30:5d:7b:8a:b1:b9:7d:fb:af:79:ba:e8:8a:0a:fa:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:3F:F9:6B:C9:69:67:7E:D2:5F:DD:60:1E:CD:46:D9:D8:E0:7C
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:0f:45:f5:de:4a:d4:28:f9:78:b4:43:8b:e3:f5:8e:05:
90:10:7b:b8:07:38:a6:01:0a:80:b7:98:cc:24:5d:40:e1:7e:
81:f7:75:be:ad:ec:e4:ea:87:8d:11:36:5d:b3:72:23:7d:fe:
fc:71:d3:1b:ab:6d:01:68:97:86:04:ae:ec:11:7f:20:88:b9:
d7:da:a6:24:4c:b9:3d:30:d2:91:54:24:97:10:b7:92:ca:52:
65:ed:7f:22:78:30:6d:d5:82:9c:ad:41:a4:e0:39:ca:11:54:
d8:2b:ed:7b:e8:de:b3:51:33:7d:31:f7:bc:c6:3d:c2:03:4a:
de:52:ae:5e:a5:1e:48:26:21:d2:e6:f3:55:01:86:5d:0f:0a:
89:6a:7f:7f:15:85:d7:9d:ee:1d:ea:30:38:19:37:e0:78:eb:
36:d5:da:b5:1b:4f:91:42:39:3f:aa:af:3c:fe:cf:13:30:83:
ae:33:7c:a4:6c:74:d1:9b:b4:4e:b4:e2:8b:b6:4f:2e:2f:85:
96:73:97:c3:05:b3:86:28:dc:89:47:ff:db:24:58:ac:b8:ac:
21:f2:b6:48:27:56:af:88:92:99:27:55:55:83:60:d5:83:66:
d1:f7:ed:87:8c:0c:1e:81:47:75:94:0b:64:53:0f:55:76:6a:
10:f1:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:40 2025 by rpki-client