Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: L9PGBHwE4lm2NeK0LjFwX0qTwOB5hiiCzL/qgC/LOvI=
Subject key identifier: 53:AD:ED:E2:B1:10:0D:4B:8D:2E:20:5D:17:1E:42:40:FE:1F:FF:7E
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0199FC585BE7061F77FFB7D93E659A95188F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: i+F/FZ5buTBwmkhj20nhVjiqbc4FJdrGXXCheB15xRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5b:e7:06:1f:77:ff:b7:d9:3e:65:9a:95:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=53adede2b1100d4b8d2e205d171e4240fe1fff7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:02:50:c7:37:f2:1e:e5:86:56:92:95:e1:
24:80:6e:c4:cd:08:9b:8b:a9:ae:31:fd:c5:c8:71:
2a:0f:c4:94:54:1a:5b:b3:43:3f:05:ab:41:4a:61:
c0:96:3c:f2:f3:9e:15:41:f6:6f:3d:31:87:d2:ae:
0e:9a:9a:d5:30:62:fd:01:02:c5:e7:86:39:7b:e5:
15:92:23:a7:5a:c8:d9:83:f2:da:95:16:f4:3f:a9:
06:e7:2d:e9:89:49:3f:a3:48:43:f3:e3:b4:31:44:
1f:4f:d5:7a:b2:25:50:ec:d7:a2:45:c9:64:64:41:
58:53:f4:25:b8:71:bf:07:e3:9b:1a:72:49:04:bf:
f0:c6:ce:4b:17:69:57:40:59:5c:91:39:61:4f:3e:
5b:b7:fb:8c:c1:0f:8a:42:0f:2f:89:8e:70:44:ce:
d7:ef:d7:09:08:cc:f0:58:77:9b:30:86:28:24:1c:
6d:12:d2:76:75:89:1a:ca:04:84:ae:c5:b5:bf:26:
b9:64:a2:36:80:0c:b7:e7:53:b8:ee:f9:05:62:b0:
58:21:20:5b:a0:b7:06:b3:18:4f:eb:d4:c4:96:b1:
29:4e:34:fa:83:35:6d:3a:b9:e4:a7:af:4d:65:4f:
19:90:8e:d4:ca:82:43:82:c2:3b:f5:d3:34:11:a1:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AD:ED:E2:B1:10:0D:4B:8D:2E:20:5D:17:1E:42:40:FE:1F:FF:7E
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bc:d8:2a:5a:0d:08:a3:7e:29:ec:60:27:ef:18:6c:e8:29:
dc:0b:a9:a0:d9:28:33:45:29:bf:47:e6:d5:2c:4e:63:06:8d:
92:b8:85:99:c0:dd:97:86:8d:82:e2:5e:61:8a:d4:41:9a:1f:
55:0e:2b:98:8b:ac:19:64:f7:4a:0b:69:c2:ea:ac:df:e6:87:
ac:bb:5a:ee:50:02:d3:37:a5:2e:3e:9a:2f:f4:c2:ad:f4:45:
4a:13:be:03:cf:85:06:e0:f7:c6:54:54:8b:0a:30:28:2e:c3:
64:c4:40:4a:1e:e0:e6:fe:45:33:cb:25:84:ba:b6:84:40:74:
11:7d:87:35:75:38:9f:64:7c:8a:9c:0c:ab:37:f0:2a:27:9c:
c7:44:0a:e5:2c:63:b0:f2:5d:6d:ff:58:59:cb:62:c2:ba:84:
0a:5a:98:7c:2e:7e:25:4f:3e:87:be:b4:93:47:e2:f7:96:d5:
09:61:24:6b:a1:fc:60:67:95:f5:e1:4c:4f:fc:4a:24:a5:2f:
a8:89:47:57:b7:f9:39:ee:42:2a:04:6b:cf:57:49:96:2f:de:
4f:b2:4d:dd:4f:7a:12:93:7d:7b:29:0b:aa:62:c2:22:4d:6b:
8e:c2:82:62:68:28:29:17:a5:78:f7:bf:87:eb:1e:78:27:32:
23:a6:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:45 2025 by rpki-client