Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: Eshhy3DcRh7z56FuZFj0kSWjr8P3JPAzuWITCYZMjFU=
Subject key identifier: 83:F5:75:DB:8E:9D:C6:EC:2E:88:0A:F5:3E:AC:FA:B8:44:A4:27:CF
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 0199FBEBBF4F004AE5B42BEA10BF0EB4688E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: m42sVOzcqUweWZ4FGA79b8io1dTSQhqo6AVPxRNKvgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bf:4f:00:4a:e5:b4:2b:ea:10:bf:0e:b4:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=83f575db8e9dc6ec2e880af53eacfab844a427cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:16:0c:54:ee:6c:3b:4c:57:26:96:00:f6:
69:b7:76:62:b9:ae:82:4c:e0:12:1a:df:ef:6d:81:
02:77:b1:40:5c:ed:2d:70:b6:fb:e2:8c:c2:b1:37:
02:78:4d:79:dd:0d:1d:f7:f5:ac:c5:b5:22:c2:20:
0f:eb:57:a7:65:e6:14:6e:6d:c6:6a:15:d0:dd:e8:
33:2d:6a:2f:91:f3:a3:41:7e:97:49:bd:6b:f7:ad:
9f:8a:72:98:df:80:df:8a:e6:32:55:fb:88:78:cc:
da:80:5f:18:d1:b9:a9:1a:99:37:e0:07:ef:34:d0:
f0:96:df:fb:83:b3:4b:5d:0a:0b:91:2b:8b:25:81:
a3:d5:5a:49:c6:81:ae:1c:fc:4f:db:c0:bb:ca:91:
b4:4a:d7:15:5b:a2:fc:75:5e:ac:26:3a:22:6c:66:
d8:5f:2d:9d:b2:bc:32:bd:3a:c4:32:ee:52:4f:d2:
cf:2a:40:e8:02:3f:ec:f8:c4:99:1e:08:01:a5:9d:
58:3b:f4:c1:e3:82:e4:ce:ff:c1:1e:a2:67:e4:e2:
89:f5:9f:b2:35:b8:8e:ba:c8:24:81:1a:a5:07:79:
40:1a:6d:01:0c:da:b1:8e:89:a4:6f:44:09:91:a3:
ec:8f:f9:66:53:67:81:e8:f9:39:9d:68:90:9f:92:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:75:DB:8E:9D:C6:EC:2E:88:0A:F5:3E:AC:FA:B8:44:A4:27:CF
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:7c:e1:4f:8e:27:d1:ad:27:24:e2:33:8a:9a:c3:91:b3:
5d:20:e1:60:91:87:a5:3a:b9:44:93:96:c8:10:92:d5:3e:a0:
19:4a:1c:1b:d8:28:ad:fe:c8:8e:f7:6f:e2:8f:37:02:3f:cd:
48:c7:6a:8e:9e:17:57:a4:64:98:80:8c:86:4c:88:49:d8:a9:
5a:99:77:11:a8:59:dd:0f:c9:98:8b:a9:af:98:02:cd:3c:61:
15:33:a7:17:b9:00:98:75:7c:a8:a1:a5:6e:b2:ca:9a:0c:46:
0b:d8:53:83:6d:b1:30:a2:e1:6c:a9:6d:a5:0b:98:59:b2:39:
24:2a:28:9f:3c:2a:ba:ae:ff:d7:b0:0c:32:d8:99:f5:cd:64:
ab:95:1a:57:86:2d:17:38:87:56:98:4f:da:78:d0:a7:13:b6:
69:cd:0f:23:aa:34:5d:f0:24:14:86:df:53:c1:5b:0f:3e:22:
96:fa:bf:a7:8b:28:b1:08:20:8c:96:25:a1:d3:69:96:9c:19:
1a:e1:7b:59:f8:23:33:84:1e:df:7b:3f:4a:cd:ad:a6:a3:bb:
71:1f:8a:51:44:c2:4d:bc:14:a6:45:b9:4d:35:26:6f:23:21:
80:8a:5d:3e:b3:15:97:c8:e4:02:bf:0c:f2:1b:6a:c6:08:e4:
f8:e2:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:10 2025 by rpki-client