Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: QSTkbXhQBkJepAZDrImiytl1lteJPxx5/WF5ZA96cNY=
Subject key identifier: 7D:26:62:58:F6:B9:22:9A:A8:BF:E1:53:FA:74:7F:AE:17:52:2F:82
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 0199FCC68B228E04C1B84FB0314ADD9B96A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 1224
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: aEYY9//zu7ILCBOHfjBAipgcIID7fgwLb7VQ2eHZQak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8b:22:8e:04:c1:b8:4f:b0:31:4a:dd:9b:96:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=7d266258f6b9229aa8bfe153fa747fae17522f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:53:6b:be:c5:1e:e4:65:f0:ac:45:b4:53:
d0:2e:66:00:aa:0a:c6:05:9b:d3:04:cc:a7:46:ec:
26:64:19:f0:4a:06:be:8f:47:19:12:83:80:22:e3:
39:a6:9a:0d:72:b3:44:28:d7:a0:6d:b1:f8:5a:f8:
6d:37:bc:59:cb:68:7d:d0:84:0c:35:47:7d:22:61:
56:bc:d8:b6:30:04:b4:74:b1:ea:05:b5:f3:89:af:
06:85:0d:5d:b7:df:26:e3:74:93:f0:f5:6a:38:b5:
42:9c:17:52:a8:d3:04:40:30:9d:d3:1f:34:d7:75:
eb:ca:5b:16:c6:21:9e:d5:f9:0c:8d:b7:d1:79:b6:
da:7d:a5:05:27:b9:df:59:22:4c:76:f3:bf:7f:8c:
db:7e:b0:44:82:3d:4f:96:96:27:02:53:8f:d1:6e:
3c:7b:f5:7d:82:9c:cd:e7:6e:8d:0b:13:b8:fa:b8:
40:56:f3:c2:28:53:ea:47:b0:52:3a:28:6a:9f:7e:
c4:af:cc:88:c4:aa:21:0c:19:58:b9:75:4d:7e:7d:
73:04:2c:7a:f8:be:ae:10:ea:47:e7:97:e4:ab:e8:
4c:90:74:e6:aa:f1:b4:ff:c6:1a:34:bc:21:2c:34:
de:24:ad:4c:31:e9:0a:9f:ac:76:b6:d3:e5:fb:17:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:62:58:F6:B9:22:9A:A8:BF:E1:53:FA:74:7F:AE:17:52:2F:82
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:07:2e:a9:68:28:04:6a:6a:a1:4e:ba:d3:e9:49:91:96:2f:
cf:2f:5a:54:0e:e5:65:15:bd:78:70:93:d7:76:9a:23:83:75:
bc:33:02:ec:a4:7f:a8:91:14:e7:07:a7:de:95:57:23:cd:71:
1f:10:db:44:15:ab:90:96:84:32:dc:25:30:d7:0f:5f:8f:8b:
d8:f4:99:5f:06:7a:1e:07:26:75:d9:0d:71:49:40:65:fc:12:
d0:aa:b0:c6:ce:40:7b:0e:7b:33:b6:81:71:9a:76:33:71:12:
1a:5a:66:9f:1e:bb:e9:3a:f2:34:8d:c2:b8:33:65:3e:21:ee:
15:a9:49:69:8f:08:f8:60:c4:44:15:0e:0f:d6:12:69:22:d8:
98:87:f7:80:d2:9a:f4:20:3e:02:e3:4a:69:ba:0e:1c:ef:2c:
fa:f3:2c:74:e3:86:e7:02:90:66:3b:1e:e0:bd:53:ae:7f:08:
66:73:fb:f5:55:e9:ac:d6:3b:25:ca:0c:9b:84:ac:ba:e2:bb:
93:a1:9c:26:ef:12:66:b7:ba:f1:5f:73:1d:d6:57:6a:ed:37:
83:f0:33:5f:02:b0:e5:cc:3d:4f:1b:a9:60:86:51:99:c3:7e:
96:56:a0:62:44:7c:fb:6e:a6:ab:fb:e2:e9:4e:13:67:dc:8e:
56:22:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:07 2025 by rpki-client