Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: I3Qe/Z1d+q/kfXctLoGviJJ1Z0UOp07Hp48G77BaFEY=
Subject key identifier: A0:20:D8:3C:00:3F:D9:46:BD:49:CB:72:D8:FC:A8:78:77:56:AC:3F
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 0199FBEBB2D397E6E0E349A68CFB61BA5482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 09D0
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: WVMDf3XiJvhrjFNoNWeV3ZSbqKe2SI79VJ68mr2shDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b2:d3:97:e6:e0:e3:49:a6:8c:fb:61:ba:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=a020d83c003fd946bd49cb72d8fca8787756ac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:d4:89:52:af:25:53:fd:dd:14:0f:1d:96:
7f:5b:d8:36:f1:f2:1a:22:48:bc:a4:16:22:dc:b3:
ee:f8:ac:33:28:7f:d8:60:50:ec:e5:4a:a4:db:a3:
69:28:41:94:19:e2:09:3d:07:8b:13:51:d6:21:4b:
cb:04:c5:38:6e:64:4a:c4:5d:ee:33:d4:ff:de:33:
1f:be:a5:39:c7:dd:04:bc:57:7d:d7:e0:d2:e2:fa:
69:cb:60:03:6f:d5:c8:cd:89:55:e0:4c:fa:93:5a:
2d:17:7c:c6:63:d7:6f:a3:f4:cc:18:42:e9:75:31:
51:d7:39:d4:51:d1:84:4c:4d:6f:da:fd:f6:02:6a:
c0:ff:b6:19:b5:ec:d9:9d:3b:85:a5:86:fe:ad:a1:
d0:af:26:80:3a:21:d5:1a:72:ad:af:a6:85:fe:43:
63:3e:cf:d1:63:bf:19:65:f7:d3:c1:da:1e:d6:02:
ae:10:0a:83:46:72:21:d7:76:ca:36:18:7d:3d:51:
81:7f:e5:ea:3b:21:d4:fe:65:e2:68:36:91:c7:e6:
86:c1:53:ca:2e:da:cf:e9:db:c0:25:b7:1a:8f:55:
83:65:03:64:75:de:05:61:c2:36:61:20:3e:2f:0a:
17:5f:73:63:3f:1a:b6:1a:0b:e7:7e:20:09:01:8f:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:D8:3C:00:3F:D9:46:BD:49:CB:72:D8:FC:A8:78:77:56:AC:3F
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3e:aa:d6:7c:a8:d9:7d:f3:da:93:f5:cf:c9:ea:c0:fc:65:
1c:e2:2a:d7:f8:74:c5:e6:34:0a:1b:62:2c:19:03:92:f2:16:
c3:23:26:34:93:ec:93:33:56:7f:fd:a8:3e:63:c0:48:ca:fe:
51:f7:d1:d0:f8:4c:95:01:17:ca:68:75:3f:a1:39:ad:95:90:
af:1e:04:89:f6:ff:2d:ad:19:cc:af:63:a3:19:7a:cb:c5:ae:
7c:61:db:32:02:78:f2:2e:ef:b8:88:f7:4f:d9:9f:a4:be:d5:
68:7d:7b:61:cd:f4:c0:8d:e3:dd:cc:7c:eb:c3:22:a8:d4:75:
8e:b3:51:ca:64:32:4f:3b:50:01:5d:10:1e:cc:d7:4a:93:01:
23:f9:db:c7:30:9e:82:c7:8e:13:3d:88:b1:b7:ac:f7:a6:bf:
24:b6:da:05:91:5c:ec:19:2a:30:81:43:da:35:cd:b6:64:dd:
67:cc:3c:4f:7c:94:c5:79:3d:b7:3e:2e:ea:a3:75:74:d6:91:
68:96:06:77:e0:f7:f2:07:e5:5c:31:be:33:7e:58:a6:e1:46:
27:7f:b4:37:4d:3c:d9:e6:62:20:ae:9e:c7:d1:d7:f7:e8:63:
88:5b:23:32:f3:32:ca:46:9d:2b:74:d7:8c:ba:bd:e0:65:0e:
81:be:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:58 2025 by rpki-client