Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: kSw+tNMqIMfKAU/B8Zu3U2Loc3twJf7Sm1uRG3CM34k=
Subject key identifier: 51:29:46:9A:07:A9:9D:1C:BC:2C:24:9A:C9:C3:40:44:B7:18:EF:95
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0199FFC793F65EA881183F334DD7E688FE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:33 +0000
Manifest this update: Mon 20 Oct 2025 04:01:33 +0000
Manifest next update: Tue 21 Oct 2025 04:01:33 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: a7gm5UyfboGLBXOYywoXm1Cw1xL5AliDtYfUXRY+lHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:93:f6:5e:a8:81:18:3f:33:4d:d7:e6:88:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Oct 20 04:01:33 2025 GMT
Not After : Oct 21 04:01:33 2025 GMT
Subject: CN=5129469a07a99d1cbc2c249ac9c34044b718ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:91:f3:e0:d3:db:ef:3f:15:88:10:a1:d0:
11:1c:27:86:d6:e0:8d:53:a1:e2:dd:0b:6d:9b:60:
93:ee:c4:44:29:d1:3f:49:5f:1e:53:e5:67:0a:7e:
76:d8:a9:3f:5b:cf:16:bf:76:be:ed:76:ec:82:83:
88:85:5f:e1:b2:5a:58:95:67:0a:46:dd:b5:e4:f1:
82:0d:0c:a9:12:31:21:54:d1:3f:b8:5b:c8:ec:c9:
43:93:85:05:1c:39:6f:bc:b2:42:fe:f7:92:dd:5e:
d1:90:bd:45:09:d0:6e:43:a5:52:3f:9c:5b:be:e6:
b9:8e:0a:8f:05:6f:0e:cb:03:bc:90:c8:0f:51:37:
95:a0:32:aa:b5:b1:79:b0:b4:67:6c:1c:82:62:0c:
cd:94:51:3a:72:fa:bc:d6:d4:9f:2e:d6:80:81:50:
08:70:58:a7:7e:ac:8d:bc:82:24:b6:b9:35:f0:8a:
cd:e0:78:2f:4e:d6:2b:15:e8:f9:4b:56:8d:4d:62:
67:3a:33:24:62:b3:53:21:c5:df:aa:aa:79:c3:b6:
65:6c:a4:0f:67:39:38:96:cb:cb:2f:97:2a:f4:75:
8c:bc:6a:0c:eb:cc:29:ab:9d:5f:dc:09:19:26:80:
19:da:37:ba:d2:90:e8:ab:15:61:32:1e:2e:3b:d0:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:29:46:9A:07:A9:9D:1C:BC:2C:24:9A:C9:C3:40:44:B7:18:EF:95
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:56:c7:cc:80:da:38:b1:82:41:90:45:8d:db:e3:ce:e4:ec:
37:82:43:57:4e:bf:65:07:d1:c1:c8:d5:68:92:bc:7a:8a:ca:
71:7a:fa:d3:0c:5f:06:d3:46:53:94:84:9e:0f:b9:c3:96:a4:
b1:fa:a4:e0:00:44:b6:d8:c7:72:be:a7:7f:48:8b:c9:10:33:
7c:ae:71:ee:7d:40:a6:f4:f4:ac:75:86:87:0b:48:65:d8:3e:
10:e3:3b:b5:83:83:e2:dd:3b:73:7a:5e:36:19:86:a5:3c:54:
aa:ee:d2:6f:32:19:91:86:03:1b:31:58:48:56:e3:32:29:da:
3f:cd:b3:0a:23:e5:00:3e:64:9f:89:08:67:ac:04:e4:f2:ef:
b8:36:0a:33:98:69:38:82:39:81:f8:c9:5d:c1:b3:1b:31:67:
db:46:7c:0f:41:18:ca:15:c5:6b:8d:85:99:6e:2e:2a:24:20:
e4:8a:e6:36:e0:8b:e8:29:7f:48:45:9b:12:81:70:51:5e:ff:
76:8a:da:7c:00:b6:5e:ce:18:9f:bb:33:5c:b7:ce:29:70:08:
94:3a:08:25:b3:4f:42:2b:88:eb:59:7a:f4:0d:1c:32:f2:4a:
37:a5:fb:4a:03:18:84:8f:f1:41:ad:28:e4:88:42:3a:05:44:
6b:57:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:23 2025 by rpki-client