Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: rkpZIr5dAKJgaOFi35rGFqy5hxl2LEDad9gaXBRj3Ho=
Subject key identifier: E6:68:77:D9:E8:5C:06:96:7E:C6:30:D4:8E:2D:F6:3E:1C:55:DB:38
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 0199FDDA653C81D4AFAE2D249FDE189C6B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 1461
Signing time: Sun 19 Oct 2025 19:02:52 +0000
Manifest this update: Sun 19 Oct 2025 19:02:52 +0000
Manifest next update: Mon 20 Oct 2025 19:02:52 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: gkgFxkHA+XIcKR2Jxqh+VKm5i6LWbDiuiw3G7ZjjHa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:65:3c:81:d4:af:ae:2d:24:9f:de:18:9c:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Oct 19 19:02:52 2025 GMT
Not After : Oct 20 19:02:52 2025 GMT
Subject: CN=e66877d9e85c06967ec630d48e2df63e1c55db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:e2:72:ed:23:8f:3d:69:9e:01:b1:d0:83:
59:3c:7c:5b:cc:b7:3a:33:10:0c:88:99:a9:2d:8f:
16:0f:c8:b9:1c:5f:19:52:72:e1:ad:27:67:5b:b4:
ba:b9:d9:fc:03:95:fc:2a:00:93:5b:44:12:92:ee:
4b:49:3f:27:bb:a5:60:17:04:36:72:4b:18:c1:c4:
96:14:7f:5f:c5:ff:43:86:89:e3:51:8b:91:f0:b3:
d3:98:94:88:6f:85:a5:f6:8d:ea:ba:63:d1:32:32:
5b:52:ae:cb:5f:c8:20:71:ab:b9:45:73:3d:bc:fc:
2b:8d:73:41:4a:47:2a:40:f1:1a:fd:8c:1a:79:f3:
0f:a0:33:bb:68:f9:5c:d0:93:74:28:d3:59:70:19:
85:45:e3:ed:36:1f:17:4d:64:8f:0b:30:b5:9a:a2:
fc:9c:72:18:02:02:3c:8f:f2:53:0c:44:25:f8:6b:
70:7e:9c:00:41:1a:f7:b8:34:f9:65:29:e2:af:ce:
a0:00:d2:bf:22:0a:42:64:62:c5:5f:71:d3:fe:50:
c5:a0:40:3f:84:12:d5:5d:c4:f6:40:d5:e1:41:c5:
7d:d6:6f:d9:86:73:a3:44:70:f7:55:c1:94:ce:12:
da:0b:52:a8:61:c2:50:e1:3e:83:36:c1:17:fb:3f:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:77:D9:E8:5C:06:96:7E:C6:30:D4:8E:2D:F6:3E:1C:55:DB:38
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:2e:13:39:f8:74:77:a2:08:42:62:dd:c6:77:be:c7:4a:
c0:2c:c0:5b:bd:96:bc:fa:34:4a:dd:cb:db:05:d7:d9:49:7a:
79:30:79:6d:0a:a8:e2:2f:98:32:a8:92:fc:ad:0c:52:cb:13:
50:fb:ee:8e:e1:fc:57:c0:38:5f:46:02:82:72:a5:79:75:53:
15:79:b9:d4:ed:79:2f:37:3e:ff:2b:55:49:2a:e7:23:27:62:
4a:64:44:49:94:f7:00:be:cc:6c:ee:d3:12:df:8d:04:e6:cb:
6c:68:c7:37:01:82:15:fd:44:1d:c3:8a:4f:24:49:65:0c:60:
4f:9b:ff:09:71:28:1b:cd:ca:8f:fc:64:e9:f2:f9:ec:bf:41:
c1:cf:2b:fc:b2:1c:60:2b:35:a4:98:98:84:f6:f2:9e:eb:9f:
07:2b:21:74:15:d6:9a:9c:f5:95:7c:7d:4b:42:7a:ef:94:3e:
19:75:19:f5:a1:6e:21:2f:66:37:62:b4:31:1c:4e:4b:72:87:
f0:57:70:ca:a7:b3:35:e9:92:c5:14:3d:2a:13:92:1b:dc:fd:
31:e2:f9:1a:02:73:f2:06:81:90:4c:39:9e:59:d4:92:d5:c3:
63:c1:26:88:4d:0b:4f:d7:42:27:34:e5:12:9f:bf:19:65:a4:
27:a7:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:04 2025 by rpki-client