Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File: JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier: vLKUpaWp8VosLtyAE8X/Gmvi2Wy+TJibMfhcr2whQto=
Subject key identifier: B4:14:3A:CB:3A:17:75:69:99:3E:2E:0B:41:0C:52:D9:B6:FB:28:0B
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer: /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial: 0199FC58C29DEB4D811E31D0A7771122EBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number: 15EA
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: /JNogk6E6q9eUWiNFp4cJKZ0YfvDSTQ4zFPyALW/w4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c2:9d:eb:4d:81:1e:31:d0:a7:77:11:22:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=b4143acb3a177569993e2e0b410c52d9b6fb280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:fc:fd:52:ff:4f:93:83:e6:5e:d2:20:7f:
cd:95:22:c3:0a:82:11:00:d9:2e:1c:ae:83:66:74:
b7:7a:67:55:15:47:f5:e9:0c:bc:2a:19:5d:19:cf:
78:6c:0c:ba:fe:90:14:ce:72:dd:e6:dd:65:3d:8a:
b1:97:9e:50:b4:55:00:c6:fe:25:f3:f1:bb:91:a2:
06:f9:51:83:7c:cd:0c:e0:bc:cb:a5:e4:b2:49:76:
42:77:f9:93:e5:c2:65:ad:53:94:0e:9a:37:04:50:
f9:be:e4:a9:72:ec:98:dd:a5:e7:c2:7f:fd:5d:db:
09:7c:40:49:7d:62:00:39:ba:12:89:d1:05:2d:08:
29:9c:a3:5a:35:e0:74:6f:8e:c5:a3:88:b3:93:c9:
ba:9c:0c:ed:83:21:e6:e2:b3:17:35:5e:c3:f9:e2:
96:67:ac:8c:03:9f:fb:7d:9f:2a:04:fc:1b:26:98:
f6:d4:c7:c8:51:f2:9f:98:e4:dc:c1:5b:f2:4e:b8:
54:b8:21:56:7a:c1:b8:8a:69:35:38:c7:38:5c:c3:
aa:61:55:0e:51:31:c3:51:4b:f8:64:0c:84:73:0b:
c4:1b:62:ac:24:9c:2e:b6:71:ae:59:f2:f5:c9:6c:
c8:2a:30:93:b6:5e:b2:1c:41:68:6b:d3:de:6c:ef:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:3A:CB:3A:17:75:69:99:3E:2E:0B:41:0C:52:D9:B6:FB:28:0B
X509v3 Authority Key Identifier:
keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:1e:74:2a:8a:07:ad:af:61:97:6d:ea:58:4c:a9:d8:66:
7b:7d:1b:8f:01:1f:bf:00:41:33:d7:77:7a:b4:4c:d5:df:ba:
a3:e5:cf:de:e2:f2:37:41:d8:2e:25:f9:5f:f3:4f:06:73:2b:
b0:44:c3:06:f5:e1:5a:b1:2a:12:a3:5c:77:bb:38:24:a7:88:
9f:00:21:78:03:ca:4d:37:7a:c5:40:a1:93:7c:77:b6:62:e4:
e7:91:c5:66:ad:a7:c1:cf:60:54:d9:6c:0d:fd:5e:c5:aa:3c:
0c:22:9b:2c:f5:55:6d:39:8b:67:3a:88:f9:cf:9f:d5:a8:1f:
5a:bc:61:0d:ac:0a:96:6f:89:c1:77:25:4d:65:9e:ac:61:f1:
42:85:91:96:a2:ed:c3:10:b4:94:d1:50:60:52:55:15:8a:4b:
de:0b:8e:cd:0f:16:05:54:80:14:a8:05:3c:bd:57:f1:49:1e:
0e:ff:43:57:9f:a3:07:74:50:89:f6:c2:f3:0d:39:d6:db:c2:
b9:2e:9e:c1:9f:f8:39:26:b4:65:b2:f7:53:89:4b:ed:b4:67:
03:3e:3c:4b:14:52:de:4a:01:51:fd:4d:ba:26:a9:fe:71:a6:
65:57:3e:04:43:67:2f:0f:9c:f1:47:cd:07:21:63:b5:b0:53:
9a:42:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:42 2025 by rpki-client