
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: yC2ow3J2eM+L3Lbnt042NkN+shfpl3wVOZIzXQ+/bVs=
Subject key identifier: 11:25:21:D1:15:2B:A7:B4:06:E7:77:15:EE:B0:4C:D0:46:E0:54:7C
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 0199FBEAD6F8EEAD5AD8328925EE70E1B7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: 024F
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: ZFOhz39T3Iaj3HkC7JUzdvQUe5hIWynBWC5Yy250nl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d6:f8:ee:ad:5a:d8:32:89:25:ee:70:e1:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=112521d1152ba7b406e77715eeb04cd046e0547c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:4d:bb:d8:02:1b:08:5e:fe:07:36:49:0a:
cc:0a:b5:59:fc:b3:06:05:37:ac:2e:56:46:e2:e6:
cd:95:8a:02:e8:cf:91:ff:1f:b5:dd:a6:98:80:50:
ed:86:e2:d5:c6:f1:2e:a3:b7:f5:ce:ac:77:04:6a:
6a:d7:b4:8c:59:d6:f0:b1:90:33:c0:da:7a:32:c7:
b7:d4:4b:32:bb:40:94:34:38:03:51:0b:3f:43:d6:
ab:0f:63:2e:0e:8f:6f:38:65:96:05:ed:dc:e4:3b:
3b:dc:b6:22:e5:c5:1f:42:f4:70:07:d6:b7:6a:2b:
36:bd:81:af:70:74:d9:ea:b4:f3:1c:b3:1b:10:e1:
da:54:f3:7a:25:df:4c:9b:a6:b7:d9:3a:5c:b7:a2:
3c:c0:6b:28:e2:14:8e:3f:a8:df:28:4a:04:4d:3a:
2b:54:75:d8:95:60:9f:3d:ea:c4:79:d6:49:4f:37:
b2:ba:88:b9:91:cc:b6:b0:a2:6b:b1:62:ee:5d:1d:
13:bb:7c:20:db:aa:16:07:4e:c9:8f:00:2b:e2:9d:
f3:50:cb:86:c6:2c:e9:ae:19:06:13:6b:b9:88:27:
47:60:8e:a9:7f:e8:62:32:e9:3c:45:06:90:cc:bb:
d0:7f:de:c1:2a:5d:b3:2a:d0:1d:ad:5e:41:b0:57:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:21:D1:15:2B:A7:B4:06:E7:77:15:EE:B0:4C:D0:46:E0:54:7C
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:38:ad:50:4b:7a:80:e8:92:bf:62:6b:12:99:8b:8e:85:
9b:6d:e2:dc:21:ba:cf:05:18:cd:a0:15:7f:62:1a:de:c7:c3:
de:9e:22:03:f9:ac:64:77:94:26:b6:72:9f:52:f0:1c:7e:92:
55:ab:71:be:20:bc:27:7c:28:1b:32:82:25:c7:a3:07:8d:6e:
3e:94:ae:40:45:6f:a2:6b:fb:44:61:24:01:0a:c8:17:26:f0:
77:53:e1:80:b5:8a:1a:2f:b7:29:b1:cd:56:e8:78:3f:19:8c:
92:31:b8:6e:fc:11:5f:f7:eb:5e:89:9a:08:26:67:2b:17:de:
46:62:e7:bc:04:58:c4:1b:a1:ca:92:08:78:a8:02:af:c6:07:
c1:85:26:3e:32:ad:4a:bc:b4:3d:34:87:1c:e4:fc:bb:19:8b:
bd:7f:61:93:f7:50:8e:84:d3:b6:bd:0d:28:25:c7:55:e3:53:
a8:e5:c3:81:90:56:41:0d:d6:d4:e9:40:d0:2e:b8:0c:bd:4b:
da:15:8f:b0:39:4e:14:49:cc:bb:41:85:44:3d:44:c9:d0:14:
38:22:4b:33:1e:a0:cc:a3:8c:be:f0:cf:07:34:dd:89:6a:ad:
d2:42:9b:ba:40:7c:26:52:01:d4:cc:5c:9a:80:f2:47:ee:bf:
08:4a:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:30 2025 by rpki-client