Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: Nk11TA5ynb0Qlw6aGbXOH5qMPYW5MqZRst2tLIwIKcA=
Subject key identifier: BE:32:1D:63:9C:91:8C:32:DB:19:DE:22:52:62:F1:95:C6:38:94:09
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 0199FFC8DAE5DE8ED950D949D0F0D5886764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 04:02:57 +0000
Manifest this update: Mon 20 Oct 2025 04:02:57 +0000
Manifest next update: Tue 21 Oct 2025 04:02:57 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: 1e1MqVeNjsFqz6qj6MGoGfbyk7wlLDtcQhycyJOjs18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:da:e5:de:8e:d9:50:d9:49:d0:f0:d5:88:67:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Oct 20 04:02:57 2025 GMT
Not After : Oct 21 04:02:57 2025 GMT
Subject: CN=be321d639c918c32db19de225262f195c6389409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:9b:56:e4:c1:6d:52:18:6e:3a:cd:f9:f8:
43:65:31:6c:9f:4f:74:35:08:50:ee:bb:d2:3c:25:
95:37:a5:bc:32:bd:08:26:8d:9b:5d:c7:61:8c:da:
aa:fb:6d:85:af:d6:9d:b5:89:d5:a9:6e:61:3e:1f:
df:2b:6b:f1:78:07:69:3c:17:07:5b:90:ee:a7:54:
2b:21:29:51:bc:fe:ec:47:f4:ba:11:1b:76:ac:a4:
c9:49:64:96:f1:34:1a:e3:bc:44:48:a5:08:9d:6b:
4f:1f:4b:53:ef:92:2b:73:7f:41:f1:4d:87:d3:d5:
ea:d4:dd:f8:f1:a8:c4:10:c9:75:5c:dc:fd:64:cb:
5b:a3:bc:a1:8d:72:ef:49:fc:36:ec:bf:82:a0:64:
c1:0e:87:2a:41:f5:e8:c4:5c:ed:07:e1:70:97:39:
9e:16:57:0d:f7:4c:e6:35:2c:b6:aa:f9:e9:69:f3:
59:c0:13:6e:ce:bc:db:66:50:0b:73:e8:bf:6d:3c:
72:5d:12:46:67:27:9e:20:9e:8f:96:d7:db:6d:9a:
28:81:72:d2:15:ce:2b:92:3a:2c:c2:18:bc:a2:57:
9c:cd:62:41:31:cc:f9:85:f6:87:1b:ec:07:68:eb:
77:92:5c:2c:11:27:3a:23:ea:75:33:c8:50:71:69:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:1D:63:9C:91:8C:32:DB:19:DE:22:52:62:F1:95:C6:38:94:09
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:5f:03:71:eb:94:fb:7e:71:4b:9e:6f:47:22:e6:0a:f1:
ce:4c:f1:9d:a1:56:48:83:dd:cc:a2:56:19:96:8b:94:d5:b8:
a1:47:fd:df:0f:cd:7d:7a:ed:ee:b6:17:e7:bc:d5:1a:5e:9a:
4f:b0:17:1a:9f:23:a4:a6:06:3b:40:a6:93:39:91:af:a6:c6:
38:9d:70:f2:bc:7d:2c:46:37:58:ab:48:f8:09:88:26:16:6f:
15:ed:77:63:00:67:fc:0c:c8:82:c4:80:24:99:96:be:39:b8:
5c:d6:97:17:f7:ab:f6:38:5a:42:90:e4:b5:e8:05:5e:c1:38:
66:69:d8:5b:bd:a8:f8:01:5a:e5:d0:82:be:5b:b3:9c:e6:d0:
05:cd:17:4a:2c:76:e4:11:21:66:4c:eb:bd:33:ba:71:0c:34:
8c:f0:f6:b4:73:45:35:5d:10:13:07:a3:a1:69:35:13:97:fa:
cb:76:1c:9a:c5:59:9e:96:af:11:e7:5b:70:15:0e:e4:d9:e3:
59:e1:58:24:84:d9:06:13:2d:2c:76:93:d0:b4:b3:e8:09:0c:
d0:ee:fc:cc:f6:bf:a5:d4:e3:fa:b5:48:ba:04:cb:00:0b:0c:
86:89:aa:11:72:72:b3:e0:7f:73:d0:dd:f3:6b:e0:53:05:3e:
f5:6b:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:32 2025 by rpki-client