Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier: tCyVhGxxBuHuT5tXwwd0FI981dik28uZqWKZ7fg+a7s=
Subject key identifier: 2B:A5:8F:31:28:46:36:D4:91:38:13:B6:94:B4:99:02:C7:C3:9A:32
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial: 0199FBEA7B520323F8E70B4FFE8D1B83E94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: /qdlL//qYQs+WWjgpjreSMXN08oX9FMvgl1VzLjS5NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7b:52:03:23:f8:e7:0b:4f:fe:8d:1b:83:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=2ba58f31284636d4913813b694b49902c7c39a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:7d:32:8f:68:0c:da:56:e3:c8:d4:20:ff:
e2:71:37:3e:60:39:66:1b:ab:26:98:21:8f:67:33:
33:67:84:f8:40:33:79:90:71:32:cc:db:9e:e5:e5:
48:64:5b:c3:e1:41:6a:51:09:cd:20:3d:06:aa:ff:
7c:83:eb:85:71:68:94:74:e5:2a:c5:6a:33:44:00:
a0:07:a1:02:53:b0:1c:4e:8d:64:d3:8b:9a:5f:37:
b6:12:f1:8d:28:ee:66:3b:39:59:5f:a7:26:3e:fd:
10:82:ba:0c:74:eb:c3:9e:3a:5d:bd:a6:b7:09:7c:
27:69:fb:cd:22:54:0f:7c:58:7a:5b:09:0e:90:ca:
eb:f0:8b:04:44:ca:f9:c1:21:ef:72:fd:49:08:41:
16:ff:1f:f3:4b:ee:f8:4c:68:67:10:d8:04:62:07:
ca:89:de:cf:31:02:56:bf:2b:43:c1:b0:8c:38:8a:
ce:c5:e4:ec:2c:1f:33:fa:3c:46:16:4f:5d:57:04:
1c:28:8b:d4:43:72:e2:97:42:3d:a5:e5:82:e0:8a:
61:6a:fe:a6:d1:e6:58:23:86:43:cf:13:01:ef:68:
0b:62:76:09:e8:81:09:53:81:e7:fb:4e:0d:a7:b5:
6f:4a:be:2b:2b:af:10:c2:2b:99:9d:c9:b6:c7:34:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:8F:31:28:46:36:D4:91:38:13:B6:94:B4:99:02:C7:C3:9A:32
X509v3 Authority Key Identifier:
keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:a6:4f:c3:79:43:de:da:4a:42:0d:58:08:b6:2c:30:b6:
ad:53:08:ba:27:b7:c2:42:6b:ec:27:7b:b1:ce:4f:24:00:74:
de:4d:4d:d1:b2:10:0e:c1:4b:59:61:f8:ba:58:e5:65:b3:8a:
0f:d8:4a:17:65:b0:31:ab:b9:ce:27:49:f8:ce:33:ae:66:8b:
f6:f8:15:90:13:b1:c5:46:c1:ae:6e:60:df:11:62:38:69:1c:
e1:46:33:aa:97:bf:0d:72:98:63:30:b6:7a:82:16:43:90:ec:
4c:21:cb:2d:c9:d1:1c:a9:0c:31:dc:78:dd:4e:d6:1f:ed:82:
cf:ab:2e:96:6e:1a:9b:e8:c6:94:a7:d8:15:04:da:8e:31:0b:
e4:52:67:e4:83:a1:7e:c6:36:55:39:77:f8:72:a1:d5:62:2e:
67:d6:bd:a7:ed:0f:e9:96:1e:5b:5e:b1:89:b8:7b:1e:d5:67:
a8:43:60:fa:c0:42:9a:c0:b7:11:57:99:a6:12:60:4a:a4:78:
bf:2c:b8:25:e3:01:1f:fe:b7:1f:78:ec:63:d9:0a:fd:24:c8:
75:30:eb:64:84:06:28:d5:e8:ac:d1:56:ec:d3:49:26:dd:f5:
e0:c9:8f:92:47:fc:f7:c3:b9:6b:de:af:68:32:da:04:54:85:
7d:29:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:57 2025 by rpki-client