Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: fI9FjE0SNXy6z1UhcXeO/SAlMizl0nSrrv+lbnTabmA=
Subject key identifier: A0:92:02:26:B9:B7:FD:06:D7:E4:87:21:B3:44:53:B5:2D:51:EA:A6
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 0199FE7DE37398E856E6BD2F2582FADAE381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: ns/gUd7oIPNfQqvLs4bvhyx8kSdUMcyIoWOll7Q1688=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e3:73:98:e8:56:e6:bd:2f:25:82:fa:da:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=a0920226b9b7fd06d7e48721b34453b52d51eaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:23:3b:bc:3d:5c:31:bd:4a:54:51:ce:ea:
01:b8:13:98:32:00:c3:b1:05:12:64:ba:67:04:c0:
72:43:1a:bb:4a:38:c7:d1:a3:77:31:42:03:a6:0d:
9a:9c:ec:97:da:89:7d:fb:41:ce:f7:d6:43:68:3a:
49:80:02:b9:e0:c1:29:95:05:dc:b4:b0:cf:88:24:
61:25:65:d1:04:c4:4e:7e:cb:03:6a:c0:5e:17:48:
2e:cc:8a:ce:48:da:51:8f:8d:54:38:1b:e4:86:f8:
b1:cb:e2:5e:10:ef:c4:c9:da:49:94:87:de:6d:80:
52:0c:05:88:43:80:ed:46:21:5b:d9:6d:e2:ac:07:
01:37:48:79:47:71:cd:e3:84:a5:77:8b:e2:e6:cf:
f9:78:49:a9:6f:6c:05:e1:d9:39:1e:98:0c:cd:50:
3f:cd:8b:b1:a1:f6:c2:a2:4e:81:80:e2:20:b8:44:
77:10:ce:f1:3c:c6:50:50:ca:79:89:43:cd:6d:f2:
24:03:31:80:5d:a0:36:8d:c2:09:2f:81:28:48:b9:
68:d5:b8:48:75:ab:d2:79:72:0d:4d:f1:33:fe:31:
56:b7:17:49:fb:06:50:d0:20:98:b4:23:10:34:a7:
e8:db:70:a8:9f:94:47:2d:bb:a5:24:3b:cd:02:c5:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:02:26:B9:B7:FD:06:D7:E4:87:21:B3:44:53:B5:2D:51:EA:A6
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:97:36:e2:19:5f:9f:f3:95:5e:53:d7:ab:89:59:36:38:
69:7d:20:0c:ae:e7:4a:f9:60:88:91:80:b4:ae:53:6e:8d:78:
21:29:be:9f:d8:86:3b:b4:16:22:1d:65:20:ae:89:71:57:3d:
f0:24:0a:ac:8e:5a:7c:3b:36:34:fc:51:9b:da:a0:74:29:06:
b3:a5:83:95:b6:bd:8c:c0:dd:94:ca:11:ce:57:2a:f5:c5:f0:
a5:5f:e7:55:b4:e3:67:e1:a6:ad:5e:3c:fe:b4:a8:a2:80:81:
1a:68:28:5e:89:6c:b1:37:c4:f3:26:dc:7d:a4:51:39:d2:a0:
45:c9:f6:e5:68:af:f0:93:84:c7:87:cf:67:07:68:f4:20:cf:
7d:dc:22:e1:2b:3d:1e:39:30:28:26:8b:3d:37:cc:e7:59:12:
d9:1a:2c:00:85:36:06:37:17:d7:a5:47:74:33:3f:4f:07:6d:
e4:93:11:ee:ca:32:4f:69:95:9f:e7:ae:30:47:b1:fd:e8:19:
03:46:c3:38:0d:29:fb:48:56:ee:59:ca:ea:e1:30:a8:70:8a:
b5:27:12:1e:90:23:a4:b2:67:d3:e4:10:8a:aa:56:fb:18:e0:
b2:10:d4:fe:22:41:14:ad:d4:a5:6b:1e:b6:f9:67:02:e8:12:
35:97:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:36 2025 by rpki-client