Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: zkX8ZEInV9TrneMVyNrkxPmGdgkneRxiOxtrEmUnRrk=
Subject key identifier: C1:EC:A2:47:7F:D8:9C:43:F7:2E:A8:F0:AF:7A:DA:11:02:6F:6E:86
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 0199FB45D371F7501A1842D6F9D09BB0DB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 077A
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: VmCTWwlj4uyggb15gGs/xqNKjuuvlI46sFQA+NLkjuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d3:71:f7:50:1a:18:42:d6:f9:d0:9b:b0:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=c1eca2477fd89c43f72ea8f0af7ada11026f6e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:4f:45:2e:36:96:c4:b3:70:c6:ad:32:d2:
7e:a3:f8:54:ed:5a:a1:1a:09:48:6e:d6:0d:7f:67:
97:e6:ac:14:1c:11:c5:6a:75:43:67:ac:50:5e:4a:
e0:ac:07:1e:d0:e6:dc:c2:61:56:d8:f9:4f:a6:01:
c7:a9:2b:7e:ff:64:81:28:25:1a:20:fb:59:18:48:
dd:49:97:fe:ca:83:a2:dd:57:19:74:de:42:a1:fa:
cd:63:72:69:a3:d7:e1:e6:f5:f2:7d:01:17:14:d8:
c1:94:e0:53:99:9c:4f:91:b2:a7:82:8a:18:04:05:
34:6f:76:40:18:cd:c6:b8:b7:9e:ec:8f:9f:19:2f:
46:45:b7:0b:a7:19:e4:8d:93:68:18:aa:b1:f6:04:
91:52:af:d8:fd:34:f0:cb:fb:f9:b2:c9:a4:a7:f8:
50:fc:99:66:6e:90:23:d9:76:4e:0b:fd:ec:cf:47:
b4:ad:79:3a:02:4c:3e:9b:bd:90:19:47:f7:5e:ea:
0c:a5:77:d0:ec:68:d1:51:c9:6f:a4:35:19:87:cf:
eb:d0:ef:00:d2:b5:5e:a5:ca:12:83:e2:80:c7:7a:
b5:43:b7:16:6d:c0:0c:97:90:22:b7:81:3e:39:da:
71:29:3d:1a:da:63:06:dd:0d:92:9d:7e:25:c6:a2:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:A2:47:7F:D8:9C:43:F7:2E:A8:F0:AF:7A:DA:11:02:6F:6E:86
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:59:df:9a:fb:77:c3:de:68:d2:a8:28:ad:dc:1d:2c:b5:
25:58:fd:16:15:2d:48:89:ae:fb:df:24:e0:9a:45:f5:d3:54:
73:60:3a:c1:97:ac:80:b0:92:1c:ae:b3:70:91:25:e8:4f:12:
8e:72:c5:be:01:a0:d4:4d:2a:b4:58:f9:dd:16:3d:65:4b:d7:
4f:70:4e:ca:a6:c8:64:6b:34:b5:dd:e4:1b:51:65:4a:80:b4:
63:5f:74:6d:c9:9c:00:41:53:1b:8a:ec:88:85:da:4a:f8:c3:
4f:a2:2b:0c:ec:bf:9d:ef:ad:bb:e5:99:e9:71:03:78:cc:ab:
57:f3:26:79:91:bb:63:87:dc:d3:03:ca:76:1a:1c:f2:52:bd:
23:bc:b9:bf:31:66:0c:08:2e:f3:17:81:1a:7f:3e:26:b4:3b:
3a:ca:7b:2b:f5:73:86:17:23:70:cf:3b:39:12:c7:87:5c:99:
0b:22:cf:80:e9:4e:fa:9f:c3:a8:08:d1:95:5a:75:a1:1d:2d:
d4:48:6a:a5:4a:14:2c:3b:ba:b3:7b:06:e0:fa:e3:1e:7f:df:
50:cb:61:82:2c:00:19:c9:98:1f:e6:15:2d:c1:d7:ca:58:1c:
6c:4f:78:aa:93:a4:0d:e4:b1:95:5f:53:60:0a:d7:e4:38:10:
4b:d0:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:55 2025 by rpki-client