Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: 232IKx2K6t0FB3SQYnYHs8OEy5CHMHX9eHcOQH3UpcE=
Subject key identifier: 11:A2:90:A7:DD:3F:05:6F:DC:1D:4E:7F:6B:56:C3:91:AC:B6:3D:2C
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 0199FD346E40193C3214B0A3988F97406DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 07D9
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: Q1gQt0y7vywY4iEAmpWutzxwsnKD8mXxqvNgWUzjKDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6e:40:19:3c:32:14:b0:a3:98:8f:97:40:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=11a290a7dd3f056fdc1d4e7f6b56c391acb63d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:8b:fc:46:cb:d7:95:92:e2:34:14:e9:6a:
29:05:bd:01:53:c4:89:30:56:24:81:2c:61:da:82:
33:53:66:a1:ee:d4:f4:7c:3b:51:61:0f:e1:d4:03:
78:ee:ac:c3:7c:b5:8f:35:5c:ce:13:c2:f2:22:f1:
16:0b:ed:b9:74:ed:73:9e:bb:c4:be:47:01:c2:0c:
79:f9:03:b5:8a:7a:4f:44:d4:3d:8f:8a:b8:39:05:
ea:8d:64:ea:70:0d:9d:f6:8a:45:cb:60:33:78:c5:
e9:9d:fb:aa:7b:92:3d:85:12:df:b4:29:b7:bc:38:
46:9c:c3:46:48:5e:82:c0:36:d5:d8:94:ca:18:70:
a8:77:51:79:f1:32:b5:37:b5:55:5a:56:46:c8:59:
ab:88:ac:8f:4c:31:9e:44:88:15:59:55:88:f2:be:
28:d8:8e:25:b2:e8:6f:ad:c5:4a:02:a9:11:8f:df:
79:12:59:e8:31:e2:79:db:19:9d:63:8d:9e:72:41:
fd:53:d6:a9:5a:50:bb:01:63:58:ce:aa:72:36:79:
b4:5b:6b:e4:33:4a:a2:41:3c:7d:6f:db:8d:a4:57:
89:fc:4c:b3:78:22:3e:95:5e:b2:28:4d:13:c1:b3:
f1:17:47:b3:2d:db:7b:72:b0:27:e2:1a:12:b8:ef:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:90:A7:DD:3F:05:6F:DC:1D:4E:7F:6B:56:C3:91:AC:B6:3D:2C
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:7e:f5:75:6d:2e:0e:84:05:f5:10:61:43:6a:30:95:ed:
5d:e7:20:83:ee:fb:51:86:fc:26:10:82:b3:64:56:73:c7:7b:
18:4f:95:41:04:08:c5:36:4e:65:31:50:6e:b9:4e:af:4d:fa:
23:87:62:82:53:c5:ac:3c:b6:69:ba:63:7d:bb:1c:5d:a4:ce:
d0:a3:58:57:36:46:b6:d2:38:68:b5:02:53:d6:f4:f8:a4:8d:
c6:46:9b:16:3b:03:e3:98:79:17:cf:b6:0f:91:f5:b8:10:da:
59:fe:98:c3:ba:e4:23:00:bb:ee:a5:2e:9e:74:94:26:f8:67:
4d:85:b2:32:ac:e0:42:57:85:f0:8f:e4:8f:19:4b:31:77:f3:
93:37:f4:4d:fd:ad:55:87:a2:19:a4:a2:4a:93:31:b8:3d:d6:
a9:79:42:64:25:38:bd:9e:28:96:f9:36:86:0b:39:30:41:a4:
f2:37:fb:56:f1:47:d4:2b:0d:3e:0d:71:6c:6d:dd:e2:d5:76:
6e:83:73:1f:ae:6c:44:04:16:00:7d:6d:bf:e8:26:d3:77:d8:
ad:2e:6b:3c:b4:33:86:cc:f8:be:2f:ba:3f:25:03:6b:43:16:
a7:04:60:4f:1f:d1:dc:11:8f:41:87:8b:c6:84:0a:bb:46:ec:
3c:6a:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client