Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: m7K4VJoPadoqsdYqJUchPbA4evoGrn2cl9hovCRuTxo=
Subject key identifier: D4:70:88:78:D3:CC:D2:4B:04:24:0C:6A:F7:55:C5:4F:CF:11:37:40
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 0199FBEAE83830CCA6CDE764DA7DDDB5D1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: VJNkRHDQwjqGWUqmzEtFTryQTom4C5Cl1WSHgxqHSnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e8:38:30:cc:a6:cd:e7:64:da:7d:dd:b5:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=d4708878d3ccd24b04240c6af755c54fcf113740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:73:a4:57:5b:6b:2a:40:ed:78:2c:df:49:
e8:73:60:dc:d2:94:a1:36:89:d5:7e:46:63:93:56:
c8:2d:94:dd:58:87:ed:1d:44:44:4c:62:c1:7a:0a:
6f:3b:3a:4c:3b:25:63:07:a1:31:26:b3:27:cd:a5:
46:b1:b7:2c:62:58:8c:48:bd:b8:2c:2d:7d:29:ea:
b9:3c:0e:ad:9e:08:12:00:c0:fd:2f:45:bc:79:ef:
89:6e:2d:8a:fe:2c:65:dd:a6:23:ff:71:35:4e:74:
c2:9e:5c:d8:fa:44:fa:bd:66:ee:7f:cf:5f:3d:07:
cf:df:72:ab:a3:b2:3c:bd:08:c1:67:fa:f1:5f:46:
f5:9e:5f:08:54:e8:07:ec:92:67:45:75:29:fb:c5:
93:08:05:34:5c:06:4d:00:86:53:12:fc:04:31:39:
1e:5c:e0:2f:1f:1d:89:3a:bd:57:47:f8:d5:a0:ec:
b0:e2:21:17:14:1a:27:fa:65:39:5e:5d:cc:fc:b6:
62:2e:31:dd:ab:33:6e:a0:bd:dd:09:95:5d:f5:2e:
a8:12:0d:78:e5:37:40:52:50:b9:d0:39:37:93:8f:
32:6a:a1:10:eb:19:1e:b0:64:1e:f1:ea:50:38:8d:
f5:de:70:ea:1c:f3:56:36:b3:ce:52:40:f7:07:ef:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:88:78:D3:CC:D2:4B:04:24:0C:6A:F7:55:C5:4F:CF:11:37:40
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dc:c5:31:c3:f8:93:66:83:fb:f5:80:92:0e:3d:1f:4e:d8:
12:a5:c4:e3:02:e1:39:d5:f4:4e:55:3e:74:33:21:df:52:34:
a9:b3:e6:56:83:2d:90:98:42:34:0e:ed:32:db:d7:d4:67:1c:
0d:c5:bd:1f:a7:56:ee:4c:75:d9:e8:b9:67:2f:fb:34:23:a9:
e4:00:f3:88:4f:15:38:ac:f2:5c:b9:2e:1c:ca:c0:b0:56:b9:
e1:ab:68:54:6a:9f:a1:35:94:05:c3:4a:d7:4f:88:8a:52:92:
96:a8:7f:6a:58:f6:31:c7:ea:a6:a9:81:03:1e:de:2b:6f:2b:
d0:46:e3:40:35:fc:dd:40:8b:b5:d8:6a:e0:2d:4a:08:79:43:
05:52:37:ac:10:4a:a2:b3:09:de:84:60:9a:08:44:3b:35:2c:
a7:0c:1f:c4:81:9d:d9:62:fb:ff:57:dc:b7:09:41:2b:74:21:
93:0f:b7:f2:de:88:ac:89:08:41:7a:52:3c:3e:16:a8:68:07:
d7:0e:dd:54:50:8e:3c:0b:19:57:54:b4:ac:2c:73:49:e3:a6:
0b:77:4b:5b:bd:1d:b2:0d:f9:bf:fb:7c:30:51:84:89:83:72:
b2:be:0d:22:9a:86:0e:48:22:89:84:11:78:39:18:d9:7d:e2:
bc:c2:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:35 2025 by rpki-client