Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: 56vHyf5AI7tB3iQy7YvVtGdmPyMOwc6to2PQ8K7pvog=
Subject key identifier: F8:72:FE:F3:82:71:B6:D0:98:32:D4:2C:E7:9F:96:68:C9:6C:D2:D7
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 0199FFC72F17CE6107C7098C51A8B96E4F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 154E
Signing time: Mon 20 Oct 2025 04:01:07 +0000
Manifest this update: Mon 20 Oct 2025 04:01:07 +0000
Manifest next update: Tue 21 Oct 2025 04:01:07 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: f414l9TK5F1m8VIq4V2IEysmh2Je2+9OzzUvHXKE1ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2f:17:ce:61:07:c7:09:8c:51:a8:b9:6e:4f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Oct 20 04:01:07 2025 GMT
Not After : Oct 21 04:01:07 2025 GMT
Subject: CN=f872fef38271b6d09832d42ce79f9668c96cd2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:6e:d4:a4:9f:2e:a9:d4:90:7a:3f:bc:6f:
41:18:6f:db:0e:a7:36:eb:85:f1:ee:78:90:93:e3:
83:7b:dc:19:90:e7:a9:83:3c:54:c5:c3:d0:af:95:
41:24:13:cb:cf:93:af:94:02:49:9c:44:91:ba:d9:
98:47:82:ae:12:c6:eb:e6:b7:6c:56:57:ba:9e:3d:
83:1a:0e:33:d5:66:cf:02:54:38:de:40:f1:9c:09:
e4:57:00:52:aa:34:b3:49:75:ce:f4:66:fe:6e:12:
5f:f9:22:bc:83:99:1b:d8:22:0e:9c:fc:a9:51:e0:
93:ce:3f:96:ef:b5:41:fc:5a:6c:1d:8a:1c:09:7a:
d8:88:93:8a:63:ac:2a:43:a8:45:92:b3:a1:f1:74:
b2:e3:cd:42:83:42:f8:40:b0:dc:ca:8f:e5:c5:38:
c2:03:15:a2:c0:aa:65:e4:cf:b2:e9:b3:47:de:a7:
83:e2:d0:76:f1:e8:c7:ba:d6:bb:51:ba:a8:f0:ba:
ab:ce:2e:c2:8e:e1:9b:24:77:7e:c8:62:a0:20:ba:
5a:64:e0:fe:65:cd:8c:d2:a0:32:58:da:51:61:04:
4a:c9:d4:88:04:56:7d:03:9d:b6:b6:6a:c7:cb:95:
0b:25:dd:66:c9:ab:98:fc:ef:0f:91:96:ce:0a:ef:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:FE:F3:82:71:B6:D0:98:32:D4:2C:E7:9F:96:68:C9:6C:D2:D7
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e6:c5:bf:a4:76:94:01:47:ef:50:a7:bc:b7:14:ad:f2:2a:
77:21:da:bc:36:9f:58:dc:00:d7:4e:73:38:b2:68:91:21:c1:
34:92:8b:01:42:72:59:23:1e:81:e3:ee:3e:63:ac:23:f5:9d:
7f:f7:97:66:72:70:7a:a2:40:1b:b5:6f:3c:7f:65:cb:13:ee:
f4:dc:e9:8b:de:3e:d4:14:a0:a2:f4:0b:7d:e0:a7:19:ee:1d:
a2:1b:20:23:d8:b3:c3:7a:4f:a5:a3:7f:5e:fb:58:10:19:fb:
44:4b:1e:29:68:b2:20:b8:86:54:31:3b:25:63:f0:5a:98:93:
af:da:af:f1:16:18:36:1a:43:49:9d:3f:16:d2:5a:d1:6b:b6:
90:d3:7e:36:fd:f0:2b:6e:06:7d:b5:a0:9b:57:2f:b4:e1:a0:
fa:86:92:8a:7e:5c:44:5e:c6:6a:76:b4:47:46:52:1c:6d:cb:
f4:16:ab:7d:b0:25:e6:c7:5d:5f:e6:2c:20:83:f9:bb:0b:d5:
fa:1b:35:93:ff:f4:c6:2e:e9:58:36:94:02:f3:24:b1:f4:9c:
e5:ce:88:da:e6:af:aa:ac:a4:11:87:5a:e1:88:9d:f6:61:c3:
63:a1:bf:aa:cf:00:3f:fb:15:7a:d8:17:61:8a:33:03:75:63:
35:bc:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:29 2025 by rpki-client