Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: O+pd2dczSgZzCnmeq/HnCOLY+eCSjtmd5BFeroe/qrA=
Subject key identifier: D7:5E:12:5F:30:7D:83:B5:AC:4A:86:ED:3F:7C:39:8E:3E:75:24:D7
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 0199FC584A38F9565374385304C8FE060128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 05B5
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: y5QZQ92YQpgPvHxCY+QrcdorfwdGeLl5xoIdSrakwmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4a:38:f9:56:53:74:38:53:04:c8:fe:06:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=d75e125f307d83b5ac4a86ed3f7c398e3e7524d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:64:70:d8:77:56:95:62:2d:4f:c3:73:40:
40:86:41:71:eb:50:0c:73:24:64:7c:0d:75:87:3a:
97:9b:f5:4a:d9:93:a5:55:5a:c2:d5:27:b9:42:25:
cf:50:05:03:5c:96:29:8b:85:f6:2b:73:fa:f5:f0:
59:9d:29:b8:47:f3:b0:85:77:2e:86:82:f4:28:de:
b1:42:d1:90:74:15:73:6e:45:0d:14:44:9a:b2:6a:
c4:48:6a:cb:43:dc:68:6c:c1:3f:61:57:bc:b4:51:
b2:20:07:55:f5:5d:37:ae:cd:ff:0a:9a:70:b0:9f:
a3:af:4b:85:38:ef:73:80:36:2d:ea:0d:67:27:af:
4e:e2:3b:e6:e4:1a:b2:65:0c:26:3a:64:46:90:5c:
fc:f8:68:f0:a0:17:c3:6a:7c:eb:36:c6:3f:18:c1:
7b:da:cc:12:76:38:1d:ab:77:4d:b9:df:43:46:ee:
7f:12:83:86:cd:b6:ed:b2:6c:e5:44:3f:82:88:28:
1e:e6:79:64:93:e4:99:0f:c2:f2:07:c9:40:91:54:
93:07:11:75:ab:8b:97:3d:c1:98:0c:1e:bd:bb:f0:
5d:aa:34:f8:72:bb:2b:d6:df:35:82:0b:ee:78:26:
a2:78:4d:84:3d:90:54:79:7a:a3:9c:f3:45:b6:56:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5E:12:5F:30:7D:83:B5:AC:4A:86:ED:3F:7C:39:8E:3E:75:24:D7
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:34:7e:6a:6e:f3:a5:d7:a8:a1:d0:35:81:09:68:43:81:74:
ea:0a:ee:94:26:3b:74:3a:8a:8a:20:5f:74:e3:a1:a0:09:39:
00:f4:47:65:8a:13:8b:be:d8:f4:96:af:d9:a1:f3:46:d9:6a:
f2:48:fa:06:8a:80:5c:f4:69:c9:f5:1a:07:27:6c:4f:6e:89:
3b:fa:d7:dc:88:d5:54:55:7a:57:c1:52:70:00:5f:17:24:4e:
d1:22:ed:ad:aa:b3:c3:78:e6:6d:14:0d:73:2b:c1:0d:25:dd:
64:da:8e:40:c4:a1:4c:a9:34:f5:83:03:4e:42:f8:f9:9a:bb:
bb:95:6b:0d:b8:bc:aa:23:97:84:19:08:d0:1c:6d:1d:d0:0b:
e2:91:bc:67:57:7e:2b:ca:f2:e5:84:95:26:5d:d0:c7:67:e8:
d0:92:52:11:71:06:56:88:30:8d:1a:d6:b9:56:8d:f6:e0:a9:
67:00:88:d9:e7:c9:a4:5f:aa:96:2e:06:2e:6e:8c:c8:92:72:
1c:32:34:5b:4e:eb:45:f6:16:59:68:83:c7:7e:9a:2a:01:de:
80:be:89:ea:0e:0d:52:14:8f:7e:3d:9e:d0:af:ea:ff:7a:3e:
c7:3b:7d:5c:03:1a:4c:58:91:51:3c:ab:9d:fd:d2:2b:2e:d4:
3a:9c:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:46 2025 by rpki-client