Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: E4Y2lgBViLhCH65JdVxmgjfepbkP+80UOICs7P8mPVU=
Subject key identifier: 67:07:68:38:F0:A5:E8:CD:34:73:84:12:21:4B:9A:AC:49:81:72:6A
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 0199FBEA86DE6FE943C960E47EADD6AB1F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0C38
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: G+R3YH1JIkeT59iHKwOUevSlon3zIxLxUugPm8XffqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:86:de:6f:e9:43:c9:60:e4:7e:ad:d6:ab:1f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=67076838f0a5e8cd34738412214b9aac4981726a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:b3:6a:7e:be:5d:fc:a2:4c:4a:1c:5a:bf:
a2:6f:32:ff:4e:40:03:c8:af:5a:c4:3d:23:3c:42:
54:ca:78:9b:0b:8a:c4:c5:b1:09:26:c3:ef:a4:26:
59:60:e5:6c:dd:92:16:4a:87:d3:ae:08:10:3c:5b:
ee:ff:03:a5:11:a3:2f:48:68:62:c1:85:6c:d3:7e:
d7:a1:2f:71:25:77:9e:df:f5:10:03:37:b9:81:4a:
05:e7:2e:f4:f9:70:4a:c8:d9:ad:45:b9:d1:ac:a0:
5e:3e:4a:3d:d4:94:fd:26:8f:06:34:7f:d5:e6:65:
b4:4b:7f:6b:a4:87:e6:d8:b9:dc:d6:fc:aa:f9:77:
f7:2a:c5:85:76:10:72:73:21:5a:28:99:3d:91:2b:
78:15:61:99:e2:3b:66:0b:23:7c:5c:29:aa:4b:9b:
4b:f1:33:b1:3a:8b:60:92:06:2d:67:b3:6d:51:86:
ed:f8:d7:8e:28:46:5c:8e:7e:41:a7:ee:68:6d:1e:
2e:4a:1f:9c:c5:90:ad:c7:7a:8b:cb:d8:96:38:61:
dc:c1:45:49:a6:ab:22:50:41:4d:b2:07:34:1d:c8:
19:01:f1:98:54:1c:57:d5:04:d1:ff:f1:dd:fe:dc:
b0:f8:ae:81:45:52:28:83:e2:1a:8c:a2:04:fa:82:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:07:68:38:F0:A5:E8:CD:34:73:84:12:21:4B:9A:AC:49:81:72:6A
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:0a:b5:ba:26:7f:ae:d4:c9:f0:7e:d4:25:fa:79:bb:8a:
9c:31:27:d3:37:1d:d8:fa:de:c3:eb:0f:04:cb:e7:99:ea:37:
1c:4f:d0:a6:75:a5:dc:19:23:9c:3a:9d:fb:3d:11:aa:80:93:
03:4b:f9:8f:af:a9:e8:a1:5c:98:68:db:0b:c7:a6:b3:f1:17:
70:b3:83:88:0c:9d:73:50:bd:d5:6b:48:78:3d:91:74:b9:d2:
0c:00:e6:a1:02:b2:b1:16:82:12:31:13:52:c4:ed:af:08:1f:
2c:88:20:ce:b1:f0:9c:1d:be:79:2a:40:0b:26:ef:c4:70:70:
7c:d3:db:62:af:8f:db:55:b3:c0:2d:6e:5a:79:ca:78:67:ef:
65:aa:8b:0e:cc:74:94:12:67:47:72:e0:86:36:00:42:e9:ec:
71:e7:87:18:fe:6f:49:97:01:aa:b0:03:73:85:04:f4:b7:35:
97:90:0f:3f:1d:a8:dd:59:23:ba:a9:6a:9d:95:85:b1:d6:04:
4c:c8:23:fd:ea:04:c4:b2:0e:40:c6:2b:80:f4:ed:8c:47:82:
dc:e5:50:c1:3f:f7:d5:76:98:b6:23:5f:43:00:93:9d:b1:fc:
df:d6:cf:81:a2:91:5e:e2:d4:ee:f2:b6:94:30:38:cf:4c:7a:
97:22:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client