Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: 3PeNy3FpGb1P+4bbSpHn+FcWxabdTL7RKbcXKpqZx9M=
Subject key identifier: A3:99:54:29:17:2D:A6:DC:F2:BD:55:7E:31:A5:17:36:F4:D9:29:4B
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 0199FC8F5EC88A0B49F6ADA3461B9027CE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: bKRa2mTyl9etbkZxrV9hR6Nu8jgtgiIz7eakpK6vDxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5e:c8:8a:0b:49:f6:ad:a3:46:1b:90:27:ce:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=a3995429172da6dcf2bd557e31a51736f4d9294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:fd:da:cb:cd:f5:b5:e8:01:94:fb:09:bf:
c0:a5:4c:1c:9d:44:3f:d8:43:8b:c1:9b:98:e1:8d:
2d:a1:65:cc:cf:95:63:56:f3:c0:19:91:37:9a:a0:
4b:f2:f3:ce:92:5c:80:75:0d:40:5b:da:4b:f2:8f:
cd:40:97:79:78:29:23:55:21:1b:3f:f7:f5:bf:7a:
ed:58:96:09:3d:9c:de:d6:97:b6:63:75:ed:a0:6f:
ad:95:d6:26:12:09:8a:1f:3d:d7:35:0f:52:49:e4:
13:d3:3c:2d:52:5d:db:ab:e1:d9:2c:72:07:6d:e6:
e7:5d:28:ec:5b:a7:a3:d9:91:c6:78:9b:c4:0d:3e:
21:7d:6c:82:e7:cb:94:fa:5c:e5:a5:9b:ba:ec:b2:
f3:23:23:a0:99:13:1c:dd:41:92:f4:f3:d4:98:f0:
2f:74:7b:47:1c:b7:f5:05:79:88:97:3d:c7:24:1c:
19:89:7e:0d:62:7b:90:d0:d8:ec:f9:1f:19:a4:04:
2a:7c:a0:67:a4:8d:d8:55:0f:6f:f8:58:25:41:d6:
c3:49:08:34:2e:45:07:5e:6b:1e:0e:7b:6b:a6:d2:
84:4f:fb:5b:57:15:94:2c:a7:88:e1:f7:66:be:8a:
9c:87:4f:ef:69:88:ec:8a:aa:4d:48:90:e3:af:4a:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:54:29:17:2D:A6:DC:F2:BD:55:7E:31:A5:17:36:F4:D9:29:4B
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9f:c8:31:d6:1d:6d:c4:76:9d:63:ce:b8:9c:a3:fa:3b:7e:
9f:85:ab:1f:bc:c3:09:c2:81:46:77:42:54:3b:1a:54:26:67:
9d:90:06:1d:33:41:9f:99:82:c5:e3:5b:cd:b3:5e:b7:13:fa:
45:a2:d9:1b:85:bf:a0:85:6d:36:88:9f:bb:8a:0d:e2:c8:b5:
53:cd:2a:99:ce:f8:9a:96:1d:9e:cb:f8:71:96:d7:ae:6e:aa:
4f:1d:14:df:5d:10:c0:c2:b3:73:d2:e3:83:f5:68:af:78:f0:
58:6c:a3:3b:1e:a4:69:b2:f6:e0:ca:72:b3:69:cd:ed:30:f8:
da:8f:0c:79:f7:53:c7:a9:48:c1:60:8b:dd:05:e9:3e:21:69:
10:f8:02:a3:ac:7a:87:27:fd:4c:48:71:2f:53:2f:7b:6a:99:
a8:25:d8:8d:e1:92:31:99:6c:ae:82:48:b0:f6:4f:cb:59:3b:
8a:bb:83:53:1a:38:fe:16:5b:3e:d6:4e:cc:a8:c7:18:22:2b:
50:9a:75:6a:bd:ec:03:23:a9:d4:eb:e6:5e:9a:2c:b7:23:8c:
72:76:b3:2b:ce:8c:72:bb:10:d2:6b:77:95:87:f5:a9:14:95:
ee:59:46:af:bb:cc:ea:af:7f:e5:81:7d:24:4d:8c:3b:c9:4e:
19:50:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:19 2025 by rpki-client