Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
File: JTncEcLyIukQROG-eygeV23u5Fs.mft (raw, json)
Hash identifier: FvFxgnGRMKCOK9As2l1394HqXZWShtZns3OjiFHc4Lw=
Subject key identifier: 06:31:22:45:B8:6B:9A:91:4F:3C:BA:78:1C:05:33:27:24:67:0B:22
Authority key identifier: 25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
Certificate issuer: /CN=2539dc11c2f222e91044e1be7b281e576deee45b
Certificate serial: 0199FC213FFF04DC310E52C8FCED596C4D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
Manifest number: 01B8
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: JTncEcLyIukQROG-eygeV23u5Fs.crl (hash: C//UyLBA+f77jiTqHEFWZCyWTko91iw6Sxf8PlFIz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:ff:04:dc:31:0e:52:c8:fc:ed:59:6c:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2539dc11c2f222e91044e1be7b281e576deee45b
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=06312245b86b9a914f3cba781c05332724670b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:1a:e7:ed:8b:66:f9:f5:a7:aa:61:b6:11:
f3:1e:aa:f0:20:25:71:83:c9:60:fa:34:2e:cd:4f:
83:85:4a:84:55:d7:65:a1:3d:bf:cb:03:b2:5a:24:
be:d1:47:e6:91:fa:c6:d1:fe:60:4a:23:e6:6c:2b:
aa:44:72:b2:05:6a:51:35:c0:ad:97:dc:d6:a8:8e:
fc:e6:04:d7:35:3c:57:90:5f:15:c3:02:eb:50:69:
a6:ea:48:d0:67:1d:83:05:44:68:2f:e0:81:b4:2e:
38:3c:1b:f7:6c:cb:c3:b0:4d:2d:e9:86:49:f3:e2:
6e:88:67:61:27:ca:c9:1a:1e:8e:c5:68:a7:50:e5:
88:11:2e:68:16:1f:7c:23:4a:d1:36:29:98:dd:80:
d7:f7:7b:58:3e:f0:e9:de:7c:9a:f7:8d:c2:65:d6:
e2:3a:8e:45:0e:4f:c3:99:13:1d:48:7d:71:14:c1:
bd:7a:98:bc:b8:13:f9:1a:e8:6a:23:ac:31:11:2c:
cf:a6:49:7e:05:26:d5:fc:dc:80:ed:13:9f:33:d2:
04:39:4e:c6:f3:6c:9c:3b:f9:5c:7a:34:19:01:6a:
be:ea:20:50:83:77:b1:2a:04:ab:92:29:eb:2e:63:
da:85:73:69:57:23:33:26:87:fa:2c:10:e9:0f:29:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:22:45:B8:6B:9A:91:4F:3C:BA:78:1C:05:33:27:24:67:0B:22
X509v3 Authority Key Identifier:
keyid:25:39:DC:11:C2:F2:22:E9:10:44:E1:BE:7B:28:1E:57:6D:EE:E4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTncEcLyIukQROG-eygeV23u5Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98a556-6b6f-4d5e-972e-0fc8da0503c9/1/JTncEcLyIukQROG-eygeV23u5Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:97:2f:c7:be:48:cc:75:18:96:97:bf:3b:b7:8e:28:ec:
8e:7d:d0:34:cf:a1:68:a4:b9:44:44:8b:39:52:9f:ca:6d:b2:
fd:11:1a:e5:91:ee:33:3b:12:c0:1d:6e:f9:af:04:d1:0e:6d:
3d:b4:2b:ac:96:55:5a:da:f9:12:80:4e:0b:64:52:fe:bf:a3:
3c:97:4b:ba:44:53:10:ea:ce:84:d1:ea:17:f6:65:09:ea:dc:
e8:86:8c:03:a4:e3:00:4d:85:f5:e6:31:f2:51:0f:90:83:60:
ec:d3:e8:04:f4:15:ca:8d:13:45:3a:72:e4:db:b5:0e:e4:b7:
50:9c:c9:0b:ba:6f:89:48:34:64:5e:a0:a3:70:7e:fc:64:33:
12:b2:d7:50:2f:92:9c:d0:28:a1:19:a4:84:75:9a:a0:e2:5c:
b6:6f:15:d6:c9:88:c6:72:8a:42:14:90:a4:b7:91:2e:2c:a7:
2c:e9:cc:de:f2:01:e5:f4:2f:0e:e7:5f:7c:40:77:f6:69:f9:
e3:c7:4f:98:1c:67:da:4d:2a:38:c3:d9:a0:61:b5:f0:74:1f:
b0:29:10:04:69:b0:26:90:d5:31:fa:7f:33:1c:da:2f:19:65:
a6:eb:cc:26:6c:94:4b:90:6a:06:b1:a8:3b:40:bf:7b:30:20:
90:77:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:18 2025 by rpki-client