Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: lnPbivFgUiJUM6cnfdSe/mbTXmKzrOW2cbLhaxgCLcM=
Subject key identifier: 01:25:00:9C:C5:D2:34:B8:F1:10:C0:3C:94:16:1F:36:65:F3:CD:8C
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 0199FC5890CEC52DB55D3D3B017AD5B2FA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: 8GnJTKhCA+o3jfyCOVpcwUQy0dokXMxF7/YWgkeymPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:ce:c5:2d:b5:5d:3d:3b:01:7a:d5:b2:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=0125009cc5d234b8f110c03c94161f3665f3cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:eb:1f:4b:e4:da:e0:ed:14:f4:6d:12:5b:7e:
8c:24:d0:e1:b1:d2:18:df:68:b4:cb:e4:4e:3e:3d:
f3:a0:43:99:7e:f1:c6:37:21:e3:ab:23:fc:3d:d5:
18:0a:59:2e:ba:ea:b4:c3:1b:de:3c:c0:b0:38:31:
08:0f:42:ee:97:e5:17:c6:f3:4f:1c:85:37:3f:84:
7b:ba:31:f1:f1:37:06:8f:5d:15:19:82:3d:15:7d:
09:a2:d2:ea:68:ca:2e:57:3f:53:dd:f1:91:bb:8c:
39:47:b9:27:79:b5:09:c4:b7:53:da:22:d2:52:b1:
6c:b2:08:07:fe:94:f7:ab:82:c0:64:27:d8:3f:1f:
3f:93:95:a2:32:04:4d:d4:53:0e:3d:be:29:78:f0:
a7:14:ae:b0:7c:19:67:dc:da:90:7c:ba:de:78:2a:
0d:23:d3:a5:45:76:38:3d:b8:46:6f:52:dc:82:d7:
b8:35:b1:0b:e0:b8:3b:4b:aa:2d:f8:40:b3:05:13:
44:60:be:09:2f:7e:6e:3f:4e:17:a6:53:a5:47:06:
da:99:fa:f5:fa:c6:5a:8f:b4:03:be:a7:06:85:69:
5f:ab:bc:81:18:85:c2:f0:2b:9f:f1:c1:23:26:f5:
85:18:76:65:94:5f:1b:34:f4:e7:ee:bd:ec:70:92:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:00:9C:C5:D2:34:B8:F1:10:C0:3C:94:16:1F:36:65:F3:CD:8C
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f8:03:8e:60:f1:a8:15:72:64:c3:e0:1b:a0:4f:6e:93:2d:
39:a2:ec:9f:46:1d:db:8f:f5:ee:ce:20:79:01:99:81:01:41:
71:b3:fd:be:a1:12:c3:65:f5:6f:79:9c:c4:12:3d:4f:16:58:
6f:2a:5b:fd:30:2b:09:a7:dd:bb:ac:3f:3d:c8:f1:8e:85:20:
00:85:6f:0e:d5:0c:18:7e:aa:d5:3f:a7:1f:29:14:86:a2:31:
15:04:84:c6:f0:d9:ee:55:39:7d:0e:be:74:98:d0:bf:d7:d7:
2d:22:a4:9d:6a:9d:06:6f:29:d8:da:3f:e4:fc:b7:9a:b4:29:
61:79:ae:f8:f5:80:29:da:83:5e:1c:d3:a1:4d:9a:03:f6:e3:
5b:57:d7:dd:3b:41:4b:36:76:2a:b3:5e:ba:73:03:6b:0b:0f:
15:1e:d7:c2:b1:e9:02:fd:9f:1c:7d:15:3a:f9:e1:7e:b2:53:
7a:01:c3:5e:9f:61:c9:71:ad:c7:a8:02:42:78:db:11:18:bb:
97:1c:fe:1e:fe:37:f9:15:7f:81:30:b0:ff:1b:3a:0c:b7:74:
20:38:bb:99:c9:52:11:2d:80:51:5c:b1:3b:22:d4:ab:5e:34:
7b:73:b5:31:6a:52:9f:3f:7d:bd:15:c3:1d:91:b1:14:e5:d9:
5c:6b:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:54 2025 by rpki-client