Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: lmR4c2tIn61vmBYXykCg7D20+uZIhVUB7lw5Bj87DdI=
Subject key identifier: 20:F1:7A:58:24:90:F6:74:00:88:D8:DC:42:EE:70:8C:3A:9C:6D:B6
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 0199FBEB0D388E0E3D60D70009FFAE13FA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1421
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: u1iIOegBRGja8Ye4j1oMDf+NYXEZoXfzH3/iATR8n0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:38:8e:0e:3d:60:d7:00:09:ff:ae:13:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=20f17a582490f6740088d8dc42ee708c3a9c6db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:c3:d1:58:e7:39:43:b8:f4:04:20:59:57:
d4:bb:f6:e5:54:2c:82:93:d5:ed:c8:86:c1:3e:da:
d0:10:10:6c:8f:fc:42:bf:2e:7a:a8:39:1a:e9:7f:
bb:6e:3b:a3:02:50:ff:0f:ed:31:89:34:8c:39:d6:
34:a9:07:f4:bb:8d:78:06:a7:fe:d2:72:23:5e:22:
48:7f:bc:5a:02:6f:a5:e2:bc:e3:6e:2b:36:fb:42:
e0:40:3b:b1:c8:79:99:16:2b:32:2b:82:ee:78:69:
81:1a:b5:5e:68:7c:7f:a4:2b:3f:5b:85:9e:31:1f:
bf:16:76:2a:1e:40:8a:53:37:3c:23:a8:f9:ea:26:
7f:43:55:81:fa:e9:87:75:22:e6:4e:3c:b5:7c:8e:
7b:5b:7e:e2:8a:aa:f2:50:4d:9c:fb:e6:6a:db:8f:
b5:16:9a:ca:f3:62:b3:87:1c:5e:4e:ea:83:60:13:
7e:09:28:4f:e1:27:cb:81:c9:52:e3:47:97:24:f3:
13:49:80:32:ae:78:f4:02:67:12:45:fc:60:9b:35:
26:97:d0:a9:2b:23:c4:45:06:8a:61:a8:41:08:89:
94:63:b5:c5:33:e8:6d:a9:c2:29:02:97:0a:57:f6:
80:3e:52:ba:da:ac:d7:23:e8:e3:85:1b:51:37:12:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:7A:58:24:90:F6:74:00:88:D8:DC:42:EE:70:8C:3A:9C:6D:B6
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b6:0f:35:d2:5b:c1:37:ee:2c:d2:72:c0:63:eb:0c:3d:00:
61:44:19:7c:9a:0b:e0:11:89:52:2c:b7:60:03:16:51:9d:45:
66:61:27:45:4f:6f:89:bb:73:a2:96:96:76:1e:68:aa:ef:9a:
98:e8:39:29:50:1c:12:dc:bc:88:13:55:9e:29:36:86:3d:76:
73:3a:77:39:0d:db:54:1d:ee:e2:48:75:c1:4b:19:6a:f4:ad:
c5:21:62:f5:51:74:98:07:6f:1a:5f:42:fb:8e:37:56:2f:63:
f4:8b:73:a9:bb:4e:38:d3:b4:1b:56:6d:dd:a6:c6:e6:6e:0b:
63:5b:aa:c0:46:a2:1f:bc:bd:7b:b9:45:77:7e:09:78:c5:19:
01:53:f0:79:ee:4a:4b:fa:33:64:ce:33:88:86:0f:74:29:4b:
11:bf:b0:23:c9:02:a3:c5:53:08:2c:4d:c8:b4:79:7a:3c:ce:
5a:27:5e:c2:3b:1e:b4:eb:80:ba:ce:b3:1c:f7:71:8e:0e:df:
45:85:53:f7:bf:26:54:12:88:b8:de:bc:35:a4:99:8d:99:6c:
b7:67:b3:aa:f8:e6:dd:a2:bb:98:a9:8a:a2:53:d5:f6:ce:25:
7a:eb:b3:4f:76:eb:b7:39:21:d5:ce:51:2d:0d:ee:25:9c:17:
63:f7:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:47 2025 by rpki-client