Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
File: JOuXPcgi1CNuy911UB0mxD4chzk.mft (raw, json)
Hash identifier: UEEG8F4VmUhLBVmlz3VIn8VLPnKUyTIDCk+tDrKdVo0=
Subject key identifier: EB:7B:6E:08:A4:60:96:8B:BD:1B:A9:F5:6D:0C:4E:AB:25:E5:33:E8
Authority key identifier: 24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39
Certificate issuer: /CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
Certificate serial: 0199FBEAC491C36E82EE78B904C6AD2FCD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
Manifest number: 0B86
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: JOuXPcgi1CNuy911UB0mxD4chzk.crl (hash: 4PgBs/JmIitoGQ5k2TLhkX+4rRwBbC3oKGB7AgLlp7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c4:91:c3:6e:82:ee:78:b9:04:c6:ad:2f:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24eb973dc822d4236ecbdd75501d26c43e1c8739
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=eb7b6e08a460968bbd1ba9f56d0c4eab25e533e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:5b:59:31:d0:27:56:ac:68:39:d5:86:41:
e6:17:f9:1b:4e:49:c9:70:03:de:16:d9:ac:b8:57:
a2:87:10:10:41:4f:c2:ba:47:96:c4:c0:81:af:74:
f5:b2:d0:20:71:d4:d7:93:61:26:36:63:49:d6:4e:
f1:cf:e5:26:d9:23:86:03:8d:22:4c:ea:6f:7f:af:
f0:c5:7a:c6:25:f2:b1:85:25:db:33:98:17:ad:c8:
c9:c6:54:4e:80:20:21:c4:4a:c0:f3:3b:dc:92:6e:
d7:80:b6:28:4b:19:58:eb:c5:76:65:d5:ec:59:9b:
68:62:eb:91:d1:68:b7:34:ba:26:8a:df:c8:53:fb:
2d:b0:15:fb:53:a9:09:c4:ff:59:4e:f5:84:6e:95:
c6:8d:4f:7e:99:08:d5:8d:67:6b:34:ba:10:3c:1c:
ce:f2:bd:44:1b:89:e4:65:75:ed:c5:93:9c:f7:e4:
92:5e:50:99:74:ac:de:51:c9:4e:d9:60:fa:59:47:
7f:c0:f8:27:f5:60:4b:d7:08:9b:bc:4c:fb:e4:f8:
60:79:91:64:26:db:4b:9b:2a:a9:90:9f:c1:02:14:
11:71:40:4e:08:b6:ca:96:63:9c:4c:8e:10:71:b0:
fc:3b:a7:6f:a1:2e:06:df:b0:25:4c:4c:10:db:b3:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:6E:08:A4:60:96:8B:BD:1B:A9:F5:6D:0C:4E:AB:25:E5:33:E8
X509v3 Authority Key Identifier:
keyid:24:EB:97:3D:C8:22:D4:23:6E:CB:DD:75:50:1D:26:C4:3E:1C:87:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOuXPcgi1CNuy911UB0mxD4chzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9cedd9-113b-4061-a632-4e1d167f0a9c/1/JOuXPcgi1CNuy911UB0mxD4chzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:27:64:bd:43:4d:b7:90:d1:7a:b0:e7:6c:5b:ce:a8:71:91:
98:59:3b:28:bf:34:ce:91:3d:a1:b6:e3:53:fc:72:06:b9:71:
f2:52:2c:d0:1f:f0:6c:70:0d:8b:ec:dc:bd:e3:4a:a1:dc:42:
cd:f6:dd:2c:f1:cb:1f:c9:14:b8:a5:6d:4c:07:cf:6d:ee:87:
14:55:c7:d4:50:c6:79:a5:a4:7c:b3:bf:cc:6b:ec:a5:06:f0:
23:f1:61:bb:5e:5c:30:64:74:f5:a9:4f:6e:3e:ed:08:ce:a3:
6d:f2:46:cf:46:82:87:0f:87:9f:a0:3b:19:28:7e:72:9f:3a:
9b:40:5d:04:12:7b:91:bc:2f:b6:3c:d5:5c:ed:56:47:e5:b6:
b6:a5:95:1b:0f:37:b0:59:e9:71:a9:7a:c6:91:72:1e:67:e7:
3b:47:f8:88:9d:47:62:a9:32:0f:01:05:75:de:02:42:9a:78:
e0:f5:84:89:f8:af:02:79:26:9c:f9:1c:c5:01:14:56:44:a5:
48:e7:ea:f9:02:bc:db:c2:5b:a4:5f:99:15:b7:65:be:0a:3f:
bd:ba:6e:fd:91:df:97:51:5c:58:5c:3d:76:c2:41:b3:68:4d:
78:eb:8c:af:65:dc:c5:fb:5a:8a:fb:69:03:b2:cd:db:b7:9f:
94:a9:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:59 2025 by rpki-client