Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: 3g/Ei188TCs61bVkoyi3Dmd4rPb8bLyXk12JWyW0OXM=
Subject key identifier: BE:EF:15:6F:4E:48:53:08:C5:BF:63:10:60:FC:93:53:2E:DA:6F:C8
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 0199FEEB97F0083AC1721FE7CC487A43419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 0645
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: IJCipbv9YZicw0Qdxrqj6Cmwlxfb0QT+hWabrG+In0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:97:f0:08:3a:c1:72:1f:e7:cc:48:7a:43:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=beef156f4e485308c5bf631060fc93532eda6fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:97:fe:f1:73:21:7d:85:85:50:d4:d4:e4:
f8:ab:37:d0:f2:97:09:e9:e1:fb:b2:7e:9f:53:75:
4c:d3:d8:fc:09:f9:cc:d2:cb:d0:ef:49:d0:40:a5:
92:93:d4:ad:75:36:3c:77:f7:05:59:fa:33:70:52:
3c:13:96:d8:10:b7:25:bb:1d:27:62:31:9a:59:74:
01:db:07:17:89:ff:b6:4f:a7:58:ab:57:b1:12:78:
7a:ce:03:03:34:e8:27:01:6d:9a:fc:89:ab:bd:ac:
b9:a5:73:ac:6f:61:ab:19:e4:5c:c0:36:00:f2:a8:
fe:52:0b:5f:a7:78:b1:94:31:33:ca:34:43:55:9c:
33:4e:ad:ae:e6:d8:fa:e4:60:c0:fb:bd:e2:b3:c8:
b8:65:a2:07:cf:44:19:a7:17:57:2e:81:d1:f2:b0:
12:95:f8:37:93:a4:44:73:2b:6f:3b:f4:62:88:04:
14:0b:1d:b7:e6:88:b3:84:7d:77:54:ff:89:20:6e:
8e:1b:47:b5:9c:60:c1:ad:4e:bc:3b:3e:3f:af:f7:
98:49:d0:23:f6:6c:a9:5a:a1:02:4b:66:94:56:9f:
ae:83:01:d3:03:85:1c:fc:db:f5:bb:da:0f:48:fc:
06:ee:8f:58:d0:d9:9c:cc:39:5b:77:05:ea:cb:86:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:15:6F:4E:48:53:08:C5:BF:63:10:60:FC:93:53:2E:DA:6F:C8
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d9:de:63:b9:d7:ff:e3:ef:6d:26:e5:f2:d3:15:72:32:bc:
c0:7e:17:21:01:a0:d3:03:c3:8c:19:73:55:c8:c6:a2:0b:81:
46:a5:04:13:b2:66:e4:20:9f:72:ab:4b:c4:9b:f7:e6:57:85:
e4:62:10:dd:20:5a:da:52:2f:73:97:e1:19:23:5b:31:5e:e3:
aa:82:3a:97:a2:9a:7f:68:6f:5b:a0:7b:5f:82:44:8c:b1:8b:
0a:62:dd:14:ee:08:5c:c7:af:9f:e3:c5:51:eb:ba:4a:dd:b2:
d0:39:a7:c3:09:e4:5f:23:13:e2:e6:a0:7f:b7:4c:5e:cb:65:
80:0e:c7:dd:b1:d4:81:58:ec:dc:14:0d:76:ce:d8:9f:f7:3f:
8c:2d:30:71:e7:0e:c5:5e:7b:23:84:77:d7:9b:e3:fc:4d:24:
47:1f:90:c0:3b:79:71:d7:ef:88:f8:af:48:77:e5:73:4c:81:
5b:27:f7:60:c1:43:b1:68:d0:72:ba:ac:a1:d3:5d:dd:4a:13:
ed:57:17:66:d5:43:83:a0:6d:b4:7b:cd:43:99:60:73:8f:ae:
62:c5:b5:1c:cf:a0:85:ec:37:1b:32:88:17:95:65:aa:db:4a:
e5:ff:f4:9f:ad:2e:1a:20:3c:e9:0e:f1:61:81:72:e2:97:81:
f2:01:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:33 2025 by rpki-client