Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: 2WjZ7ycNFUiKk2dNHxf5e6KOoWueLYrW8vr1FcUrOpk=
Subject key identifier: 3E:A7:91:C6:54:60:EA:86:F7:50:FB:2A:01:14:24:1E:3A:71:B4:E0
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 0199FBEC23C39DCF6FC8690F151CBE73C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: kPoV+DqH2LvXyhXIDj2HXWpQPLw4F+h+9FkCcKWM224=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:23:c3:9d:cf:6f:c8:69:0f:15:1c:be:73:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=3ea791c65460ea86f750fb2a0114241e3a71b4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:88:17:22:2c:fe:12:ec:c9:ee:82:ff:a5:
d2:8e:1b:bb:8e:6e:b6:c5:28:67:6b:25:eb:f7:ac:
55:84:cd:65:1a:60:cf:1e:f1:9c:08:43:72:7b:0f:
bd:12:73:db:d0:87:ff:52:a1:59:db:d4:91:3c:fd:
b0:5e:a7:5b:78:3e:2b:fb:77:0d:9d:72:1b:b2:7b:
ce:3e:dc:b9:71:57:c7:3b:57:80:20:cc:41:8b:63:
72:9e:a0:44:e6:d9:c4:cd:f3:67:71:4b:00:f4:74:
2e:43:b9:c8:bc:fd:af:9a:a8:61:db:19:7b:5c:0e:
60:2d:51:ff:60:46:5a:bb:f5:16:eb:8e:31:db:ad:
35:8f:21:e6:94:6b:4d:2f:f3:0a:1d:17:9f:d9:a5:
88:48:97:5d:1b:5a:f8:f7:1d:c6:bb:5b:c0:96:56:
e0:db:cf:f7:96:4d:b5:31:dd:88:d5:76:48:ae:21:
f4:83:15:79:02:7f:c8:5f:ec:2d:de:a1:94:ab:75:
e6:d3:7d:b2:27:50:24:7a:78:42:17:49:10:5b:8e:
e2:28:8d:db:b9:c5:ea:9d:ba:f3:36:bd:de:20:80:
47:db:d1:07:44:7c:6a:37:56:71:64:e3:37:bc:30:
df:f4:b2:f0:af:cf:0c:ef:dd:fe:1a:8a:2d:ab:6d:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:91:C6:54:60:EA:86:F7:50:FB:2A:01:14:24:1E:3A:71:B4:E0
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:31:a3:7a:2c:4a:14:55:af:3c:5b:97:36:bf:93:9e:6a:2c:
8d:fa:6e:8c:2a:3b:be:0c:de:93:12:6d:ab:d3:7c:4e:99:ee:
aa:12:21:02:ed:7f:01:43:2c:ab:3c:b7:53:ea:58:cd:ec:db:
5b:82:27:67:e2:12:28:4e:89:df:6a:4d:bd:9b:9e:0b:f4:19:
43:e3:31:3e:d7:06:f3:b6:e7:14:36:11:09:d9:93:8e:59:a2:
c9:01:d9:a2:fe:af:65:a4:32:fa:80:61:9e:2f:ac:ff:6b:08:
ca:40:c1:4e:72:bd:31:12:cd:02:38:d6:ad:57:17:0a:0d:1b:
65:59:79:99:4a:ab:2c:c9:6f:b2:14:49:85:ca:c0:07:44:fa:
2a:a7:42:87:d7:bf:23:a7:71:b6:7e:54:e1:a9:ce:26:66:85:
3b:a3:b4:d8:a0:e5:9a:6f:cb:f1:15:81:e8:b4:aa:e0:bc:60:
15:4c:e2:4d:f9:b9:05:18:4f:d9:62:6b:34:2a:58:83:81:5a:
f4:9f:18:7e:f3:3d:a7:da:40:7d:1c:b9:be:6c:74:4a:0e:02:
de:4c:e6:54:cc:48:a1:4e:dd:26:cb:a7:88:79:f6:9c:90:94:
da:dd:f5:70:0d:8b:99:de:03:16:f8:2a:f3:d6:58:70:e2:ad:
0e:37:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:33 2025 by rpki-client