Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier: 0deR6zjDLGBmftmQE4zItGs3R6dwrb4d34/GBI2SFP8=
Subject key identifier: 84:E9:0F:BA:FC:A5:26:5A:1E:99:7F:5B:D6:AF:76:A2:AC:D9:75:E9
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial: 0199FBEAF4169C147A84F2A74A59022972C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number: 0559
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: wZ31Q3DBPKz0GxsgNPLnmJDORiFGLKV/b3+II9MSTZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f4:16:9c:14:7a:84:f2:a7:4a:59:02:29:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=84e90fbafca5265a1e997f5bd6af76a2acd975e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:50:3b:9f:a2:7c:e7:9f:db:45:c9:c9:ff:
1d:48:65:62:1b:6f:11:28:31:c3:b2:8b:6a:55:08:
d5:a0:c0:56:23:af:ad:f0:f1:6a:0c:b5:17:36:e9:
cf:16:08:41:fe:30:dc:49:38:66:a6:07:c6:dc:5d:
cc:f3:fb:71:e0:c9:81:84:fd:35:bc:5a:b2:21:4c:
18:e1:84:aa:2a:b7:8b:ea:04:55:75:60:2d:3d:6c:
c2:db:e2:cc:58:33:20:b6:4f:17:22:22:23:a5:d8:
e2:2d:82:22:e8:85:b6:5f:19:97:14:8c:5b:d9:98:
3d:d3:a1:ed:ff:d8:00:d3:33:10:52:ac:95:b4:0b:
5e:3d:15:c4:38:41:01:b4:b9:e5:dd:9c:65:b4:1c:
e4:64:cb:b4:72:62:01:f4:de:cb:45:e7:65:f1:83:
bd:25:a7:31:26:63:8e:ca:c7:2b:98:95:ff:61:99:
92:af:90:b3:e5:79:b7:7f:ce:ab:7d:90:f6:a5:77:
55:24:0b:0a:60:06:e1:c2:c7:b8:29:fd:9a:b3:29:
5d:76:f9:1b:5f:d5:68:a9:23:d2:ac:2d:9e:f8:ea:
e2:32:73:d5:30:65:16:7c:bc:42:05:1d:2f:94:a8:
b4:5c:81:08:f8:35:7e:48:05:14:82:6b:78:ae:fd:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:0F:BA:FC:A5:26:5A:1E:99:7F:5B:D6:AF:76:A2:AC:D9:75:E9
X509v3 Authority Key Identifier:
keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:77:7c:a7:29:15:03:02:3d:36:06:d9:e3:f0:28:d1:e3:
8e:b7:f2:59:a4:5b:b3:56:e6:20:74:de:80:4d:bd:6e:3a:76:
d2:33:3e:2e:95:b3:87:14:f2:ab:23:9f:f6:86:36:e8:fa:d4:
26:3a:64:7b:7b:5c:6c:0a:a3:98:b4:ee:cf:14:97:9b:95:35:
ab:0d:cc:ad:89:32:e7:2c:cf:14:4a:51:7a:cc:a8:4a:98:14:
27:70:2c:57:d0:8a:0b:ab:aa:0b:f0:c9:23:13:88:60:5d:04:
bb:c6:fc:39:df:c1:b7:65:16:cf:94:c4:a6:22:09:57:a9:9d:
81:dd:f7:3b:98:b7:ce:6d:9f:3d:22:e2:fe:08:c5:6e:83:f7:
75:88:f3:7f:bf:8d:6e:d4:21:5a:6a:a7:f4:7b:c9:97:5e:3b:
f0:97:cc:a0:fb:f6:1a:16:cf:ae:ff:fe:1e:c2:8f:d3:4d:b8:
a8:8e:33:96:e3:d9:19:23:c6:ed:d7:0e:27:72:d0:e0:24:ba:
7b:8c:84:db:6a:c5:27:f2:65:9c:4d:8a:cf:57:51:5b:98:32:
51:c4:ed:2b:4d:23:d1:a9:a0:10:06:99:da:a5:15:b9:90:b7:
f2:cb:ad:59:ac:d7:7d:e2:de:d6:54:9f:11:43:53:a8:76:ee:
90:cd:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client