Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: UOeaANGAFQkLJ/DUQdYZAbrqKuxgdu0knrmyOOWwIrQ=
Subject key identifier: 9E:F4:72:53:E1:F1:00:5B:AD:9C:A6:64:56:52:5F:C2:EF:EA:B7:77
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 0199FCC641EDC2970680E870F1A0D27B2E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:15 +0000
Manifest this update: Sun 19 Oct 2025 14:01:15 +0000
Manifest next update: Mon 20 Oct 2025 14:01:15 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: DuLInwZAl49iJJMF/rsjAGbi08jVammiWWeB+1AJc8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:41:ed:c2:97:06:80:e8:70:f1:a0:d2:7b:2e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Oct 19 14:01:15 2025 GMT
Not After : Oct 20 14:01:15 2025 GMT
Subject: CN=9ef47253e1f1005bad9ca66456525fc2efeab777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:5d:5b:44:ca:40:47:4b:5d:c9:a1:eb:08:
6d:e7:b4:d5:fb:5f:a8:7f:7d:ea:8c:41:c7:f0:73:
2d:78:18:fe:f0:be:c6:0f:ea:e8:6d:fd:d5:b9:bd:
e8:ad:48:94:2c:99:53:a6:5b:91:ac:c8:44:2a:f4:
2f:40:45:5a:2e:36:ae:33:58:04:87:01:3d:61:d0:
97:8b:4a:d3:ee:01:c4:69:17:bd:5f:aa:57:be:6f:
be:c1:11:db:82:e5:4f:e4:87:db:85:72:e8:3e:d3:
ed:85:5b:28:a0:c0:ce:8b:76:f7:30:23:cb:42:91:
2d:8c:28:98:22:1e:43:b6:77:72:64:d9:f6:21:51:
47:52:eb:af:08:4c:6b:24:f4:00:b9:3b:4e:6c:07:
17:59:54:e4:23:03:d8:49:b4:61:74:99:5c:58:f2:
cd:84:f4:0c:e7:19:da:e1:33:0b:60:8f:1b:d7:34:
94:79:1b:b7:5c:f4:20:d4:cc:f4:24:3b:7f:38:00:
7f:dd:e0:0d:3e:f2:a4:60:b6:fa:d7:c5:b5:73:33:
ac:68:f6:33:07:17:7d:9b:ad:67:31:9c:3f:16:8b:
cd:f0:14:07:26:29:7f:9b:c8:76:ec:91:72:37:87:
36:a6:f4:96:13:9f:0a:ed:c9:ce:47:7c:48:e0:a2:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:72:53:E1:F1:00:5B:AD:9C:A6:64:56:52:5F:C2:EF:EA:B7:77
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fa:ab:bb:fa:ea:91:07:16:c5:47:93:56:83:79:c1:bb:f1:
6c:6c:56:a1:62:31:bc:c5:ff:6e:40:22:98:f0:c9:8d:9b:d9:
9f:f8:64:c4:71:de:29:67:ae:96:b7:51:91:95:56:b2:75:b8:
96:fd:42:b7:ce:9c:f9:d6:08:03:9f:50:bd:21:d3:41:54:c8:
2a:19:1b:81:49:ac:39:b2:e0:06:61:75:00:ee:53:18:4c:12:
92:8d:c9:c4:a4:c9:ad:04:be:7d:ec:90:99:c9:c5:df:a6:10:
f9:6e:af:2a:4f:9f:58:74:17:ae:92:56:53:81:79:d1:f6:41:
e4:b9:2d:f1:fe:e0:98:21:d0:94:2c:3c:f8:08:59:5e:5c:4e:
d6:f2:18:b0:45:3f:88:80:b2:79:b6:13:5b:69:b9:d4:ba:04:
3f:f2:12:02:03:b3:0a:80:68:8e:73:6b:e1:6d:c0:63:9d:57:
9c:fb:7f:7b:f6:42:b6:2f:d1:9a:c6:bd:54:be:20:1c:6f:aa:
0a:02:80:0e:9e:22:60:60:5d:7c:5f:c2:a8:81:12:fb:8c:e0:
2f:47:30:b3:db:bc:c0:78:aa:78:6c:2e:cd:bd:7e:fd:89:23:
ba:9c:42:1f:bc:5c:bd:40:e6:9c:fb:f5:98:60:81:6b:79:97:
92:50:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:48 2025 by rpki-client