Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: Jdr1Bry4pL3aL+sUuuiKFprGqzwS2OxpJUiPEErmVrc=
Subject key identifier: 8B:0D:A4:00:27:4F:C8:3C:BC:DF:5B:15:47:C7:B2:1A:D2:CF:85:A5
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 0199FD33E6C5423D4D6E253C683DCDF9CECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0A0F
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: qisAVtgCLIRdkWro9BN4k3Rh3xpfSEQuwrXUWb3urD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e6:c5:42:3d:4d:6e:25:3c:68:3d:cd:f9:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=8b0da400274fc83cbcdf5b1547c7b21ad2cf85a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:bb:1f:4b:c5:c9:15:f8:46:51:5c:ba:c6:
0f:29:d2:83:bf:29:c3:fd:74:ec:3f:39:e6:5b:ee:
19:95:9e:66:88:f6:70:34:76:70:44:33:d4:02:5a:
12:31:9f:c5:73:fe:b0:a4:72:f9:9f:32:c2:67:da:
70:12:ea:fe:18:9a:62:61:d9:91:b3:08:b8:1f:b3:
e8:df:66:4f:5f:48:1d:2c:50:79:09:77:c8:85:dc:
fe:e2:f0:30:3e:59:b8:ac:ab:a0:a6:e1:e6:ea:0b:
56:23:1a:65:69:a6:d1:ea:e5:5c:87:14:88:85:ed:
a2:94:51:e5:d4:41:43:3f:8c:93:6b:12:bb:60:19:
da:e0:53:da:f6:ea:72:f0:25:a7:87:a9:b3:6c:c9:
4b:39:86:d5:22:8a:8b:ce:8e:94:31:eb:ee:e5:ee:
26:b8:8a:c2:2b:63:4d:31:65:0d:d7:94:29:23:37:
b5:65:1a:06:94:86:4a:22:88:5a:5a:be:07:3e:5a:
36:0f:29:1a:21:52:46:b5:63:09:49:fb:fc:33:28:
ef:a5:ef:ae:20:04:37:5b:b1:35:97:e4:18:f1:66:
5f:2c:04:d8:71:ef:8f:bb:d3:6a:6c:8e:39:38:56:
ca:29:67:1d:13:9b:32:9a:11:50:20:23:a2:33:54:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0D:A4:00:27:4F:C8:3C:BC:DF:5B:15:47:C7:B2:1A:D2:CF:85:A5
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:17:f9:b2:5e:81:60:84:fc:6e:6e:c6:e4:5c:3a:cf:5a:39:
b3:aa:fa:3b:16:cc:e2:eb:72:6b:24:09:ee:4c:ac:6b:a4:74:
a5:1d:f5:96:ad:49:76:09:05:8e:ef:79:e5:44:dd:41:2d:11:
bc:a9:5e:8a:d4:83:60:40:b3:86:42:81:e0:d8:b4:19:55:04:
f0:20:d6:7b:76:a4:14:a8:f7:a3:b7:2e:6e:fb:27:58:0d:7d:
70:19:e8:1a:6a:a5:c2:b6:f1:79:b2:24:46:3d:b6:5a:79:60:
93:62:e0:cc:84:49:16:57:0a:5f:a5:05:2f:a5:ed:d0:51:0d:
0c:fc:ff:48:94:be:89:da:69:bf:4d:75:a8:e6:9d:ab:1e:9e:
be:22:15:10:f3:91:9b:f2:4d:72:12:88:28:cd:58:b4:59:84:
f2:d4:44:6f:1e:1b:4d:3f:43:c3:17:e0:2e:47:6a:48:64:37:
76:4e:dc:51:57:10:29:2b:86:bb:43:25:32:37:d5:7d:1e:c9:
2b:0b:86:52:a1:d3:4b:06:65:1c:d1:37:ab:e3:e1:8c:db:f7:
90:8a:69:ed:7e:ae:5c:8a:64:27:a9:69:a8:34:26:43:23:bf:
bf:a5:9e:e0:c9:a5:d2:6d:e6:98:87:41:57:4a:39:72:17:73:
67:6c:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:26 2025 by rpki-client