
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: TG5b5GQrk+D1QPU0kVvkn0yXYJ59kw/jxLal2Zer6v0=
Subject key identifier: A7:A7:B3:C2:99:17:82:B4:8C:E4:44:83:7B:9E:F7:6F:56:A5:B7:C7
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 0199FCFD6F573F124E6615D8135CB2DC1163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 1013
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: ZJFc12RUeqhP12/x4Ou6vj8u1P30Gy+/Ij5LUsveNSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6f:57:3f:12:4e:66:15:d8:13:5c:b2:dc:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=a7a7b3c2991782b48ce444837b9ef76f56a5b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:91:cb:b6:92:4f:e4:27:b7:8e:9d:03:0c:
1e:2f:b2:d7:4c:ed:32:c3:2b:84:db:bd:8e:43:a0:
cb:26:7f:d1:b8:93:1e:97:bf:6f:72:3a:9a:81:91:
3a:17:ff:5a:0a:0e:75:9e:bc:95:4f:9d:9c:d6:47:
00:6d:ed:ce:0f:d1:d8:76:c3:bd:7e:cd:49:24:0f:
f6:ef:0f:35:5c:c3:08:86:7f:1e:cb:50:bd:d5:f2:
8a:99:d7:35:bf:4a:fa:99:98:ca:cc:db:9b:81:fb:
52:34:54:7a:77:89:cb:5e:2e:6a:2c:4e:44:0a:49:
1d:d4:27:85:60:47:d2:2c:e4:8d:48:09:05:69:44:
36:a0:61:b2:2d:1a:f8:ba:2c:ce:9f:f7:81:b0:4d:
5b:8c:04:9c:8c:f0:ce:5e:be:e3:4b:ad:59:c8:bc:
eb:de:05:0f:90:7e:de:86:eb:47:32:5e:fb:16:a3:
86:b1:8b:5a:cf:1c:c8:37:92:d6:c2:29:85:c3:f4:
67:86:e1:22:d0:83:75:03:0b:63:f9:97:45:66:56:
ae:63:cc:48:69:e5:5c:0b:03:6c:5a:7c:46:68:5c:
38:bc:5f:c7:e8:db:7f:ca:d6:33:cf:57:d6:0b:6e:
20:10:c3:f9:89:c2:ec:44:4b:b5:3d:9d:c3:47:08:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:B3:C2:99:17:82:B4:8C:E4:44:83:7B:9E:F7:6F:56:A5:B7:C7
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a0:ba:a9:be:3b:31:f2:8f:ff:73:ea:f1:39:54:38:89:53:
cc:54:2d:95:ae:c9:90:d6:aa:93:db:ee:7d:00:11:ba:d3:f6:
b8:2f:66:a4:46:32:b0:e9:fe:b6:b5:66:02:77:72:db:a5:74:
bd:67:22:85:c6:0d:ad:88:e3:a3:f0:63:dc:52:09:f1:09:62:
fd:12:18:2c:9d:1f:c1:b7:fb:37:10:22:02:4e:95:64:5f:45:
f1:b0:1b:6e:15:fd:18:3b:23:04:50:f9:ec:67:31:bd:57:3d:
da:3a:50:54:23:b5:da:6a:d4:92:08:95:bc:b8:32:8d:73:39:
2d:56:9b:16:b5:a9:cb:8d:3a:fb:a0:8c:51:ab:81:cc:4d:c3:
a4:ef:c1:7e:72:81:27:69:dc:4c:97:b0:b5:43:33:3d:18:1d:
8f:7c:cd:e9:a6:6f:b7:fd:12:21:96:27:71:33:8a:67:fa:c8:
b8:06:17:8b:e0:8e:32:2c:be:d2:bd:01:3a:45:a5:e3:e2:77:
f3:0d:fd:74:da:70:4a:f6:84:1a:8e:ec:46:fc:b6:39:26:56:
ce:d7:d3:92:80:a4:a3:52:51:86:8f:c2:f2:e4:03:ad:cc:23:
8c:78:57:16:cd:2c:a5:71:cb:a6:05:fd:94:e2:98:c7:f7:c0:
1e:ae:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:02 2025 by rpki-client