Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File: JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier: kETDsPaDKtw55gKGSTwXyA57Ex26d+sw6/rFh4iHuEE=
Subject key identifier: F0:16:B8:39:39:8A:DF:FE:33:43:F6:CE:9D:9A:E1:E0:2E:17:02:D1
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer: /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial: 0198D5157465E35A73629706829FEC71BF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number: 0FC5
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: ipC8+6NMPL9XHqjS5SVMXvNfn92jbKPeqyfjledaDx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:74:65:e3:5a:73:62:97:06:82:9f:ec:71:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=f016b839398adffe3343f6ce9d9ae1e02e1702d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:bf:ee:96:38:8c:ed:e7:3c:88:2e:93:7f:
48:18:ed:14:31:f6:70:d1:ff:ed:c5:cf:03:bd:8a:
7f:45:bf:d1:74:ff:5e:56:95:87:f7:41:56:41:f2:
61:3c:9c:82:0a:3d:d5:c0:82:5e:48:df:00:c2:90:
de:c5:aa:0d:f5:79:d5:ce:8d:73:36:28:ff:b7:44:
58:5c:68:97:eb:47:86:8f:ac:bc:b0:3e:b3:31:a5:
39:df:a5:9d:30:bf:d5:9d:da:55:04:44:02:97:04:
26:a1:d6:ea:43:63:8c:dd:8f:fc:a2:36:26:0e:f9:
58:a7:9f:be:21:a1:33:d0:a0:c4:7c:3c:a0:96:ba:
c3:16:01:1a:44:76:41:49:5d:2f:54:6f:5c:9f:50:
f8:10:cb:e2:61:f3:e1:47:fc:8b:81:cf:f6:ba:46:
c1:fe:42:0d:ae:13:b2:fa:7c:c8:7b:51:60:dc:98:
9e:e2:17:ff:0f:1d:6a:77:47:dd:85:b2:6a:48:41:
ca:7f:da:99:7c:de:85:09:b8:13:d2:df:c6:f0:36:
87:5b:03:22:a4:71:ee:cd:fb:8c:74:e8:1c:dc:ed:
85:b2:e4:f3:f7:92:94:9c:2e:23:2d:01:03:cd:ee:
71:cc:62:7f:c7:a6:b2:3c:b2:7e:9c:c5:24:ab:05:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:B8:39:39:8A:DF:FE:33:43:F6:CE:9D:9A:E1:E0:2E:17:02:D1
X509v3 Authority Key Identifier:
keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:44:de:ff:af:1b:30:24:93:51:87:89:48:be:7a:5b:11:
4b:e3:63:b3:27:f0:f1:85:91:f8:d6:96:7a:0a:23:bb:50:74:
cf:e7:3e:4a:97:64:42:1e:79:98:e5:69:50:65:53:6d:7c:1c:
fc:2a:55:b3:55:d0:33:80:78:fb:00:02:ec:85:49:3b:35:0e:
2d:87:f1:05:89:8b:1b:52:0f:73:4e:d9:c6:25:71:b5:1b:ce:
7f:e4:81:2f:a4:3c:0a:44:1f:5d:eb:c9:19:76:39:b7:ec:41:
ce:e6:d4:12:b8:bb:2a:ec:46:2a:60:1e:10:f3:0a:75:79:7d:
fb:5c:07:d4:df:73:dc:d1:49:e3:ce:56:51:1a:fe:7e:70:c1:
79:d9:1e:19:df:3e:4b:57:3a:5f:5d:ab:93:3a:9e:b1:f7:fd:
b6:0d:2d:13:a9:38:82:42:76:11:f9:79:19:5f:c9:86:2b:a1:
b0:dd:2d:4f:21:d9:3c:44:32:a3:0e:2b:03:06:a2:29:b2:be:
92:4b:23:8c:f7:6a:aa:6b:d3:07:56:6e:75:33:df:60:08:ca:
7b:8a:85:8f:08:27:9f:98:29:6e:98:2b:c6:f8:9f:c0:20:8c:
20:36:c5:97:b3:e1:f4:26:a2:71:8d:f5:99:48:a4:81:13:6e:
91:64:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:22:56 2025 by rpki-client