Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: PfIgGkiUr4uYfhXu95Bq4ySfkYz4bGlPjMboG/L2FS0=
Subject key identifier: 2C:C0:AA:3F:FB:87:E3:21:45:39:FD:8E:1E:D2:0B:39:C0:9C:0C:5B
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 0199FC8F939BC0545EBFFCAAA557058FBD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 09DA
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: r5bA09p2f4WQondPhARh18IetSHOwTPa90TxE2+EH2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:93:9b:c0:54:5e:bf:fc:aa:a5:57:05:8f:bd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=2cc0aa3ffb87e3214539fd8e1ed20b39c09c0c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:18:01:25:d4:cd:41:30:fb:c2:a3:7a:e4:
86:8d:59:dc:a3:5d:81:70:78:05:8b:f7:00:f0:ae:
4f:54:4f:f7:9d:98:50:05:42:5b:ad:2c:83:70:b3:
c4:61:e3:f8:3c:6e:33:53:13:98:b6:9f:fa:69:ca:
c1:28:1a:54:0e:72:3a:bd:e1:89:c7:f5:37:7d:37:
7d:dc:ac:81:12:a4:a5:9b:0f:32:b7:a4:bc:6e:5f:
10:2a:7f:ac:d5:af:87:01:5b:97:45:f8:ae:d3:09:
52:8c:02:2f:45:0f:4b:2d:e5:b8:9a:1d:c5:95:df:
b0:c7:8e:90:0f:81:72:56:47:d6:db:df:f8:90:e5:
7b:93:27:ad:2a:10:3b:e9:2e:54:88:6a:15:38:ab:
4e:2e:ba:8e:7d:b5:86:28:26:86:51:59:a8:75:d2:
96:37:69:53:c9:d4:84:10:ad:d3:ba:6f:95:0e:e5:
8c:1c:41:59:b0:af:1e:75:5a:8d:da:df:16:82:48:
19:be:da:1d:4e:57:25:63:95:fb:69:96:01:56:8d:
85:6e:c6:a3:93:4e:cd:9b:fa:a0:17:d5:87:dc:de:
b1:14:7d:d1:03:a2:09:4d:f5:14:c4:c7:d1:05:f2:
7b:64:f3:70:da:1f:98:9b:76:2a:9b:fe:51:c9:f6:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:AA:3F:FB:87:E3:21:45:39:FD:8E:1E:D2:0B:39:C0:9C:0C:5B
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f0:86:c1:89:b9:1e:31:b7:02:08:ae:a7:f3:81:8b:f9:5e:
2f:df:92:16:1c:2c:d7:14:ac:23:48:cc:43:31:79:2b:5d:a2:
61:6d:67:69:fd:80:46:4b:33:49:9c:df:59:5a:04:39:d2:9f:
67:cd:22:e9:62:4c:6d:05:25:6a:7b:69:59:f6:b2:77:97:15:
15:e8:d2:9c:c7:4a:78:ae:b1:04:45:99:c2:80:0a:16:ce:98:
a7:6a:65:dc:d1:73:1f:3e:22:7f:8b:9a:4b:3a:ed:7a:ba:99:
e4:a1:6e:c5:41:85:09:74:4f:fc:6b:b6:a8:38:05:22:6e:17:
cf:4c:c9:a9:25:c8:28:7f:d7:1e:02:fc:0f:05:f9:f6:c2:ab:
47:a0:d9:47:ad:ab:e9:e4:cf:13:e6:13:66:88:78:c7:87:56:
51:84:d9:d9:00:15:4f:d5:12:4d:9b:63:59:94:06:99:77:48:
81:41:70:83:4b:ec:31:d0:f4:0a:79:3c:85:f6:72:46:18:62:
33:09:8b:69:44:4d:5d:cd:f8:c2:3c:f7:7f:e1:99:2b:5d:c2:
cc:57:35:10:a0:14:ed:62:cc:e5:97:da:33:01:b8:93:05:58:
31:75:78:e7:9e:6a:3a:4c:2c:a6:7c:1a:41:27:48:f1:2e:8a:
6a:96:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:51 2025 by rpki-client