
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: ekGrqKU0zOW3jx5fDqp88dkhoy0nwlHv0jZj5ieVxnM=
Subject key identifier: B8:1C:85:83:31:00:22:75:4A:CE:AE:A5:56:00:02:A0:3B:69:B4:03
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 019A01EBF081EC482E37C3FD224B1273100D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: 0166
Signing time: Mon 20 Oct 2025 14:00:30 +0000
Manifest this update: Mon 20 Oct 2025 14:00:30 +0000
Manifest next update: Tue 21 Oct 2025 14:00:30 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: rRc1CfnBQteHgq7hPTX2g5awB4Qx1WQhT23EqV/LsMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:f0:81:ec:48:2e:37:c3:fd:22:4b:12:73:10:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Oct 20 14:00:30 2025 GMT
Not After : Oct 21 14:00:30 2025 GMT
Subject: CN=b81c8583310022754aceaea5560002a03b69b403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:4f:ec:0f:cb:5f:7b:e8:29:54:ee:9e:b0:
8d:9c:34:c0:25:94:f9:76:2e:51:91:c3:3d:b2:6c:
53:56:e1:9b:c9:a6:49:9e:ab:f0:b4:2f:21:7d:3a:
87:d7:38:3b:5f:4a:7c:0c:e1:ed:65:8c:ed:b4:e8:
1d:1b:b6:13:41:27:76:87:53:14:c5:18:4f:83:ee:
86:cb:ff:e1:fb:a9:ee:5d:90:60:74:06:f9:2f:38:
19:1e:62:05:81:0a:a5:10:aa:fc:73:77:ad:9e:f3:
cf:7e:de:a0:c1:e8:e5:43:3f:4a:02:a0:f4:2b:e2:
11:14:50:7f:2d:d0:00:9b:71:39:8d:e1:3c:60:4d:
8e:5f:d1:e0:48:e8:c9:d4:7e:15:9b:1c:42:8d:49:
7b:3f:f1:25:8f:08:19:5f:17:10:bb:ed:4b:23:f4:
0a:4e:8d:1d:52:e1:1b:a7:20:25:36:2e:48:cf:49:
f2:1f:4b:db:20:07:33:8f:35:91:2f:54:e5:0b:65:
35:82:1b:41:3c:99:2a:be:59:b8:b5:80:74:a0:7b:
91:72:66:17:b9:80:3b:96:fb:c5:79:fe:da:f5:94:
33:7a:4f:24:fd:27:48:37:f0:fe:ab:46:2f:a8:8b:
46:d5:23:12:37:91:70:47:a2:03:1c:5a:4e:96:1e:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:85:83:31:00:22:75:4A:CE:AE:A5:56:00:02:A0:3B:69:B4:03
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b4:8d:a2:09:63:53:b4:cb:6b:17:7a:19:69:cd:99:ff:6e:
3a:f5:8f:2f:d6:7f:7e:87:fa:d6:7e:7c:e7:1c:e4:e4:8d:87:
15:5b:38:e3:4b:80:94:b6:d1:6b:72:32:4d:a4:5b:cf:4a:36:
15:38:0d:8b:f7:d9:0c:f1:25:77:95:f8:ea:53:0e:fe:94:7d:
93:9d:7c:f7:a8:05:f8:fe:ae:65:03:c7:d4:e5:43:75:fc:96:
53:6c:8e:d1:1c:a3:7b:90:ca:7b:1b:9e:a2:6e:30:b6:65:b0:
d5:62:e2:6d:e0:9a:9e:24:c2:74:3f:2a:2e:a8:f8:3b:8a:2c:
5b:98:bf:89:65:e1:ae:cb:cb:36:49:a0:d7:74:d3:d7:20:a3:
bd:67:2a:e9:46:ba:b8:48:03:7a:b3:21:72:67:92:b4:8c:e1:
69:de:fc:9d:ef:0c:51:f1:c6:c4:14:af:6a:45:88:29:60:c1:
da:b5:e1:ae:68:72:57:ca:ff:db:60:a5:35:fc:e6:6f:f8:c9:
35:30:59:a3:f5:0b:d3:ae:61:ee:ec:c9:e0:e2:1b:96:4a:08:
9e:0c:de:34:d3:6e:74:75:3b:c7:b3:03:6e:54:42:40:be:3b:
a1:b5:59:d2:3e:9e:82:48:73:c9:cb:e3:47:10:8d:ac:6c:06:
a3:c5:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:51 2025 by rpki-client