Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: KKyaN461TCvleo+o5/g+2n4Kg1Jwn2hWr557PEPGjdM=
Subject key identifier: C6:71:DD:2F:99:C3:00:53:81:E6:C3:BA:E8:11:DC:D2:50:69:2C:8D
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 0199FB463A4A026D302A25FB041F14D4648A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 07:01:47 +0000
Manifest this update: Sun 19 Oct 2025 07:01:47 +0000
Manifest next update: Mon 20 Oct 2025 07:01:47 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: J3I1DJ/tgrdYPprkqe7iIuH0/qN3esn6alyJ/UQnCrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:3a:4a:02:6d:30:2a:25:fb:04:1f:14:d4:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Oct 19 07:01:47 2025 GMT
Not After : Oct 20 07:01:47 2025 GMT
Subject: CN=c671dd2f99c3005381e6c3bae811dcd250692c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:9a:93:65:c0:90:1f:44:e0:66:38:57:67:
f5:52:fe:15:c0:ba:4d:1c:f4:12:48:4f:b9:72:d7:
4f:65:e4:b5:79:76:54:6f:1e:f3:75:7c:7f:a4:c6:
94:96:70:34:cc:88:2e:94:22:2a:cb:10:00:ac:34:
0b:e4:50:01:b3:69:80:56:f2:f3:69:10:fc:8a:77:
ac:90:b6:8f:d5:1e:ba:25:51:98:4e:99:b1:46:78:
1e:2b:a4:bc:78:d3:00:d7:fb:7d:e7:4e:7e:2e:0f:
6f:1a:fc:a0:8e:b4:61:64:bc:af:8c:cc:63:47:1e:
dd:12:62:16:4e:2b:ef:38:12:84:cc:48:16:63:13:
80:19:60:8a:d3:27:49:14:89:cf:e9:fe:f7:4c:a0:
5e:bd:a1:70:1e:f5:2e:b5:f8:e1:37:40:cf:8e:0c:
29:17:66:70:da:9b:49:07:c6:b6:66:e0:71:ff:0c:
47:9a:99:41:9d:47:6a:e4:1e:bb:41:ea:65:f2:76:
a8:ca:b1:34:fc:c7:13:f8:85:eb:b8:fe:cf:f9:10:
27:c7:8a:2c:c3:df:f2:3c:eb:83:0e:94:26:ad:95:
1c:88:b9:c6:44:bc:74:ed:5c:86:46:77:48:b1:b8:
a0:b7:fb:44:88:b1:82:0c:c5:61:bb:43:79:cc:8e:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:71:DD:2F:99:C3:00:53:81:E6:C3:BA:E8:11:DC:D2:50:69:2C:8D
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:25:2b:73:e9:ec:05:19:3f:33:a2:30:98:85:a7:02:1d:ed:
e3:f6:93:84:76:0d:45:c1:5a:c2:14:79:b2:71:01:64:ba:1e:
70:ab:95:04:4e:bd:b7:e3:dc:8f:15:b7:ff:d0:83:ed:b7:3d:
d2:07:db:5c:d0:9d:f6:39:c8:ca:1c:b0:aa:2f:cf:7d:b1:a2:
19:e0:a1:78:99:4c:2e:42:84:48:f2:be:54:a2:92:51:2e:3b:
fe:af:42:01:e1:ec:b0:37:2e:9b:8a:5c:74:fe:99:ae:b6:91:
8f:a4:87:b6:80:69:6e:7d:5e:7a:55:ca:d2:4c:47:a7:07:fe:
3f:80:8f:15:d5:f3:b3:77:95:54:67:48:2f:34:7c:af:2b:38:
8d:80:70:7c:20:a1:bf:64:5d:bd:0f:3f:39:02:0e:56:18:47:
cb:9d:67:72:89:76:53:94:81:a7:7d:eb:1c:49:40:ca:1a:07:
31:86:44:a8:21:88:44:dc:0f:9d:46:a8:21:38:19:74:ec:70:
d6:91:21:53:65:b4:3e:57:7e:7c:87:b1:15:23:47:47:e8:c6:
6f:3f:a8:2f:d0:aa:51:61:03:0c:30:dc:1a:4b:16:2f:02:c4:
71:f3:18:11:12:b1:1b:2c:05:e7:db:f0:4d:57:66:53:18:80:
41:2b:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:41 2025 by rpki-client