Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: RGjsi/UEArx7eN3X/JCHzimvw+m0twUn3WdkVeJVOg0=
Subject key identifier: C3:3C:4E:32:9A:11:9A:37:6E:22:C2:CF:E5:9A:32:A8:CD:37:1F:07
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 0199FDD8AEEAAD6726CEA47BEE3B62ECA0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 0A88
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: lds/CdGUfYYmqVeBQkIYPGEMGsjeu96oLBLQhKtZm+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ae:ea:ad:67:26:ce:a4:7b:ee:3b:62:ec:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=c33c4e329a119a376e22c2cfe59a32a8cd371f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:6d:09:b2:ac:ac:42:6c:6a:fa:fc:82:1c:
fe:77:0c:46:5c:9c:95:fb:04:45:01:c0:f6:97:f8:
b2:1c:d1:e1:5c:77:c3:ab:44:aa:50:b0:15:01:0f:
f3:52:2f:31:0d:70:f1:86:02:14:a2:a1:3e:91:b5:
97:24:88:be:3d:8d:5a:7f:7d:bc:75:c5:da:31:8b:
f5:e7:e0:da:d3:22:44:bf:68:a1:20:2f:34:ac:aa:
4d:79:99:d2:8c:3e:db:a0:4c:d9:d9:34:13:52:96:
64:37:ca:ae:f6:c7:f8:e6:0a:98:3a:49:f3:ed:4f:
15:c9:ec:6a:e8:48:97:f4:47:0c:69:f2:d3:c0:02:
50:96:44:43:3d:5a:99:42:00:92:e2:f9:66:55:45:
c9:20:07:31:0f:5e:4d:d5:74:be:8d:be:23:02:df:
44:b0:b8:2b:ec:86:d8:06:1c:0e:8d:48:d7:ef:0a:
55:01:5e:f2:32:f2:97:83:be:3f:ac:2f:1e:9b:3d:
29:a9:fb:aa:42:c5:b9:39:26:43:eb:a9:33:44:2f:
02:db:91:db:d5:f1:af:c9:85:0c:6f:21:e4:bc:91:
78:b1:69:4b:5d:83:7d:bb:b7:1f:a2:7d:f4:0b:5d:
c0:d8:e3:ae:44:be:e9:6e:4b:c3:03:cc:d8:e4:ce:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3C:4E:32:9A:11:9A:37:6E:22:C2:CF:E5:9A:32:A8:CD:37:1F:07
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:27:86:ea:65:65:f3:df:4a:1e:2e:51:bf:b0:ef:f9:a8:77:
d4:a6:dc:ff:29:b4:05:a1:ee:7d:b3:9e:c1:74:b9:da:6a:7d:
97:e9:c0:ec:26:96:3f:70:72:4a:69:f8:49:b7:03:94:2b:1f:
fd:7a:c2:61:42:52:e1:4f:fc:5f:f6:03:ac:6a:80:ff:f5:32:
ea:9b:99:be:f4:46:2b:6b:4d:69:36:9c:fe:ae:2c:ee:d9:e6:
a1:18:bf:9b:40:eb:3f:39:7a:a7:41:5d:b8:3d:b0:c9:46:83:
b5:6f:00:48:22:b8:4d:2b:8a:ea:43:4b:48:63:ed:b8:b9:dd:
af:b0:e8:eb:0c:b4:87:20:1c:f6:82:5c:9d:0d:0b:c4:fd:fd:
05:c9:78:35:22:a8:fc:5b:c8:f9:f2:e4:40:24:a2:e1:47:97:
b4:04:f7:ef:ea:bd:c1:a0:18:f5:6a:cf:15:8c:e4:2b:1d:4f:
99:ab:41:cc:25:f0:77:4a:82:07:82:18:b2:2f:4e:f8:5b:92:
da:72:2b:fd:64:7f:b2:28:a8:9e:07:45:67:a3:e2:5e:b1:d6:
63:84:7a:d3:e5:24:1d:b2:1e:83:a0:60:0c:24:5b:4d:24:77:
a3:b3:99:14:96:b0:7b:21:c9:a4:8b:a4:aa:4a:2d:d8:fe:52:
a8:84:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:31 2025 by rpki-client