Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: zQHklxyZzpgV6i4GO49LVMLUoYjj4QdH3BbAb8MDH0s=
Subject key identifier: 4D:62:72:C9:6B:AD:23:C7:CA:7D:D6:A8:82:15:3C:40:85:8E:42:A2
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 0199FC58731AB011081B2ADAEA67F8B0551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0E8D
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: qNgzSW/IkC/JUUVA2i3Ed+hvH8Y0+cZCPq8Vb/YZ0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:73:1a:b0:11:08:1b:2a:da:ea:67:f8:b0:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=4d6272c96bad23c7ca7dd6a882153c40858e42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:2c:76:55:80:04:8d:af:81:16:30:c1:2c:
03:a0:5e:3f:6d:5b:71:39:ba:4b:8c:2d:ee:c2:0a:
76:2e:3d:15:2c:f3:8c:34:1e:39:5e:0c:bc:30:f2:
6f:a2:ac:41:cf:24:70:4a:c1:f6:4f:0c:f2:20:9f:
cf:f7:b9:fa:1b:46:2f:b1:f4:7c:b8:7c:ff:08:98:
7e:61:55:c6:f4:6e:87:d0:5e:d4:72:78:15:a6:ed:
00:d0:de:a7:97:6d:5b:98:5b:aa:89:ad:19:53:92:
53:14:c7:05:0d:2c:7f:d1:fc:9c:eb:fd:e4:31:15:
ec:07:a6:7c:53:0a:fb:6a:81:55:02:e2:1d:81:95:
df:46:4c:30:6c:e4:25:6b:8b:48:a3:6a:e9:b9:31:
79:6a:63:ac:88:70:00:8f:08:24:32:67:e3:00:f3:
4d:d1:54:04:9e:0b:58:e1:b4:d3:b6:10:9e:2f:fe:
f8:2a:77:f4:92:6c:76:88:78:04:d2:df:c0:bf:90:
29:e3:1d:f3:d7:cd:b8:40:37:ea:82:65:61:42:bd:
15:e4:12:ee:85:0e:77:d0:23:a6:0a:3a:78:f4:1a:
a1:93:49:f0:9d:15:be:6c:43:79:8e:70:72:2e:9d:
87:1b:a8:f9:bc:ca:cc:f5:a2:a4:3d:13:68:5c:1c:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:72:C9:6B:AD:23:C7:CA:7D:D6:A8:82:15:3C:40:85:8E:42:A2
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:35:85:fa:53:d9:04:be:24:b7:59:94:e0:01:04:7f:d0:
87:c9:64:38:b3:c8:30:e1:2e:0f:39:24:66:99:5f:3f:07:d5:
d0:8b:6e:70:d0:9b:8a:ba:59:21:09:ef:1d:a6:60:22:d5:d5:
1a:f3:ef:06:53:8f:55:69:89:29:a4:d6:e7:38:60:03:9b:4a:
66:de:17:54:f9:0a:9b:f7:b8:6a:88:25:9b:cc:16:e3:a0:a0:
58:ae:40:30:0c:ed:fb:36:ed:f3:88:5e:d3:eb:92:ce:3b:57:
15:e4:09:a9:f9:7d:dc:69:c4:10:42:30:c0:87:60:b2:6a:30:
b6:ba:b9:a7:ff:07:f2:64:a7:55:07:96:9a:53:4a:64:88:7a:
17:62:ac:f1:55:b3:12:ba:49:b1:e3:ae:d7:f0:2c:2e:23:41:
12:b5:9a:5b:4a:f8:08:d6:71:a7:ed:83:aa:34:b7:68:d5:93:
86:d4:26:38:7d:73:46:63:37:80:fb:07:a7:ed:57:1c:fd:cb:
7b:0b:96:49:97:f6:3d:79:fb:cf:b3:2a:db:7c:7e:51:84:ff:
80:8b:a4:e2:10:6a:da:1f:11:41:b2:24:67:41:f5:1a:b3:51:
b6:d5:04:31:64:ed:21:27:86:00:93:d4:e4:da:7c:6b:c7:be:
68:9f:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:49 2025 by rpki-client