Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: rX4mpqbf4IRA7hHJ18HiDIDS/fI+PS6d5s7ZFd7lUdo=
Subject key identifier: 6D:7C:91:12:6C:AB:CF:91:88:08:42:59:A6:E5:61:5C:DC:DB:F5:73
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 0199FC5839D8D1576420C54E33BB9DF90307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: dHiYbZSkjdNotzWUcMq/7NlFFKTL8oNEptJ/QgJEfl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:39:d8:d1:57:64:20:c5:4e:33:bb:9d:f9:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=6d7c91126cabcf9188084259a6e5615cdcdbf573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:83:15:b2:6c:5f:c9:48:f6:d8:70:34:f5:
d9:96:0e:ac:c5:b2:c2:a3:2d:40:80:c7:c0:a6:06:
ca:1a:32:75:3e:7e:94:3a:14:7b:bb:ba:35:68:15:
2b:1e:5b:83:36:f0:19:7b:3c:47:13:50:17:de:90:
92:d9:2d:28:0a:8c:54:e5:a9:b0:9e:f3:b6:bd:5a:
33:de:44:8a:c4:ea:95:32:64:d8:8c:05:14:5e:57:
68:72:a6:8d:dd:92:55:45:9a:94:9f:d6:61:57:cf:
d9:01:26:a9:02:b7:4a:39:54:27:4f:aa:e6:25:2d:
a7:d0:4b:e6:84:cd:30:4c:60:0a:f9:2e:d4:fd:a1:
2b:e2:79:f7:11:7e:e1:aa:bd:b0:ea:32:97:4c:b5:
1e:46:c1:55:c9:76:5f:9b:69:1e:b4:ab:eb:d4:f2:
36:2f:06:14:1d:c6:2f:9c:04:9c:d7:2a:1a:a9:f1:
d7:c9:c2:3d:7a:ac:1f:ae:a8:1b:79:98:88:fd:61:
f8:25:0a:c9:a8:34:7b:07:89:77:5f:df:51:84:ee:
7e:b6:84:bf:fc:eb:b9:49:69:2b:22:23:98:37:77:
8c:92:9a:e8:0b:da:b3:2c:8a:89:f6:3a:5c:f7:bc:
ab:5f:86:4d:55:09:0f:80:ef:de:64:11:ca:56:aa:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:91:12:6C:AB:CF:91:88:08:42:59:A6:E5:61:5C:DC:DB:F5:73
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:11:d1:9a:e6:17:a0:12:6b:31:c3:ba:cd:f1:ef:f0:1e:9b:
e7:e6:90:4c:a9:78:3c:d0:f8:19:9e:ec:df:c0:8f:30:3b:94:
bb:d3:35:60:cb:be:54:29:46:97:fe:4d:78:7d:ec:fe:10:b0:
e3:63:7c:51:4f:91:47:eb:dd:ce:fc:a4:8f:0b:06:c3:90:4d:
f8:1f:6c:08:85:9f:7f:9a:18:18:2f:3c:94:eb:70:f5:ce:cc:
8c:80:7b:60:e1:cf:7b:18:86:9b:af:0c:95:d1:66:54:e0:a2:
99:7d:90:3b:28:5f:31:c0:19:14:c4:33:14:f0:cb:71:c8:42:
e1:43:d5:e6:12:20:aa:af:6a:34:51:45:f1:2b:43:d8:50:59:
29:b6:88:60:87:49:89:76:6c:c8:c9:c5:68:0f:dd:20:c4:dd:
b3:cb:44:72:97:d6:70:a7:bc:69:47:11:ee:fb:21:45:57:71:
5b:ba:b5:e2:a9:33:81:a1:f3:7b:09:92:36:3d:0d:4c:e2:bb:
57:1f:23:e0:c8:ab:bb:c2:3a:07:74:ca:e3:26:77:70:56:cd:
10:8d:1c:86:9a:bd:fb:e6:d1:34:4b:c1:a4:35:58:4a:7f:98:
f0:a8:1c:d8:62:da:26:70:20:0c:a6:e9:30:44:e2:34:74:d0:
75:a9:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:36 2025 by rpki-client