Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier: pA+uDmfcNGtBG98DMCECAcrZooiq2br369fBZK4OHWU=
Subject key identifier: 21:EA:B3:50:58:86:5F:85:14:B8:38:DF:B6:7E:19:D9:21:54:A7:D0
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial: 019A0222D9FF692D6292E13BFE5D82315885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number: 132E
Signing time: Mon 20 Oct 2025 15:00:29 +0000
Manifest this update: Mon 20 Oct 2025 15:00:29 +0000
Manifest next update: Tue 21 Oct 2025 15:00:29 +0000
Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: ce89wGwU8XOU091rtFWcd3dd3blmz3Jq3Fzqm+uxfWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:d9:ff:69:2d:62:92:e1:3b:fe:5d:82:31:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Validity
Not Before: Oct 20 15:00:29 2025 GMT
Not After : Oct 21 15:00:29 2025 GMT
Subject: CN=21eab35058865f8514b838dfb67e19d92154a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:f1:12:45:b6:8a:64:26:75:78:14:d6:2f:
4a:ea:e8:b0:2e:6d:6e:8f:35:06:b1:e3:1a:cd:65:
0a:16:88:e3:1b:05:11:e2:40:97:04:de:a0:f0:4d:
41:ca:c1:cf:ce:e4:a0:3e:ea:2d:6a:d3:fb:d0:aa:
a4:40:cd:97:78:ed:b6:62:3d:8e:f0:5d:b6:a4:ba:
6f:35:ea:83:66:96:13:94:ad:d5:14:86:fd:0e:0b:
14:89:66:f1:a8:87:90:bf:6f:ac:79:b1:9a:88:3c:
07:94:16:e8:6e:71:f8:cf:8b:46:65:7f:10:9a:dd:
14:e7:6e:5f:c5:40:48:44:dd:c8:27:b1:5d:5c:23:
95:91:8e:a0:ed:50:8c:e0:ee:ed:21:4c:2f:9b:9c:
dd:e8:38:16:13:e1:f5:89:70:ab:cd:ca:dd:a1:6d:
a8:e1:a9:32:83:76:1b:ea:d0:4f:84:c1:0d:56:70:
cb:49:0a:91:6e:e5:bf:1e:95:30:cc:e4:cb:e6:62:
7b:3b:bc:04:9f:b3:2e:04:0e:cd:54:23:b6:5c:3f:
e0:fc:34:4d:22:9e:8d:d5:a1:bd:f6:70:32:f8:e9:
38:50:40:40:23:47:68:a5:0f:3c:a3:90:5b:31:be:
1e:3d:e7:86:89:82:69:dd:98:6a:9e:6d:50:c4:33:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:B3:50:58:86:5F:85:14:B8:38:DF:B6:7E:19:D9:21:54:A7:D0
X509v3 Authority Key Identifier:
keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:ce:42:28:a9:e0:d2:80:90:c2:b5:25:e9:16:db:a5:a8:
a1:22:fb:1a:7f:6c:31:32:bc:7d:8e:96:5b:f3:b8:59:a7:61:
29:e7:10:be:1b:19:e4:96:a5:4e:ab:71:5d:a4:e4:4d:45:5d:
2e:b9:09:ef:de:d4:77:0e:78:23:e0:94:b0:42:1b:a2:63:18:
80:23:35:d4:4e:ef:60:54:36:92:74:cf:06:d0:21:1f:d0:6a:
ce:8c:43:72:ee:35:a0:61:cc:11:95:cc:46:0f:b4:ad:1d:e0:
83:95:0b:f6:c7:49:a9:67:a6:4b:a5:7d:40:1a:ac:72:16:cc:
6e:8f:40:47:6b:97:78:9b:7d:9c:ec:35:ee:5b:1f:ed:f1:18:
98:7e:92:d2:e4:cc:a9:b2:82:bf:c8:9e:19:44:f2:16:09:20:
30:a4:07:ba:9a:67:dd:68:62:da:65:c0:eb:18:30:4b:24:fc:
3e:0e:04:77:6d:e4:58:f1:e3:7a:4e:2f:13:de:92:fc:d9:fc:
64:83:b2:60:b2:c1:0c:46:b0:af:c1:a8:e5:60:b7:68:3c:e7:
a3:5a:a7:b2:83:aa:83:fe:4b:9e:34:ea:18:06:06:9a:cf:32:
b9:c5:ed:d6:6f:7e:a5:c3:d8:ca:d4:63:62:b2:8f:7e:c6:35:
b2:4a:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:35 2025 by rpki-client