Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: vc4sa7q1/5egGLIbsODupYu2XYP7Km0vjEtTkCfSZy0=
Subject key identifier: 30:08:DE:FC:36:61:7C:6E:7B:6E:96:E1:93:9F:1E:CD:2D:DE:58:F0
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 0199FBEB7D9125EF2ADA35430413F6F695BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 0A40
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: 99ii1A4UiR9jn6kgMTplYE7SVpYuuftpCtTyQJcyWZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7d:91:25:ef:2a:da:35:43:04:13:f6:f6:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=3008defc36617c6e7b6e96e1939f1ecd2dde58f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:31:a4:7d:91:97:6d:c9:d3:66:93:5a:bd:
56:85:57:05:99:b4:32:15:ee:cc:e3:48:b4:98:bc:
81:bf:f2:d8:54:4e:bd:13:b8:ce:6e:5f:3e:ea:8d:
86:ff:53:01:c6:81:a9:2a:80:eb:7a:f9:7d:46:65:
1f:be:9e:c8:d8:98:de:97:49:af:9a:d2:7c:a0:ee:
5d:68:f8:63:dc:0f:25:dd:65:d3:90:a4:3c:06:a4:
24:a5:0f:dd:f7:db:b7:6d:91:41:dd:9c:9f:d8:29:
df:52:86:a6:ba:f8:e2:2f:3d:1a:a8:26:6b:18:5a:
f6:3c:c0:bf:2e:1a:f6:6b:84:36:b3:bf:ad:24:22:
39:16:60:6d:b6:9c:22:18:ba:80:d4:9b:59:42:f9:
df:85:33:7a:06:ba:3c:34:d4:15:b6:61:82:0f:8a:
27:9b:cf:04:30:6c:0a:bf:d8:ea:79:51:53:14:42:
7b:0f:5d:19:f6:0e:61:64:be:03:9a:1d:ea:b5:8f:
83:2b:fa:93:69:70:7b:08:e1:3a:96:bb:43:ef:9f:
75:cf:39:08:35:d7:de:bd:8c:e8:07:b3:fb:c9:c7:
ba:9c:c6:e6:1c:a1:28:d5:81:b3:f0:c7:9c:5e:42:
da:c6:88:07:af:5a:76:0a:38:4d:55:23:6c:0b:01:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:DE:FC:36:61:7C:6E:7B:6E:96:E1:93:9F:1E:CD:2D:DE:58:F0
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:24:18:79:fe:b8:54:b1:c7:ee:69:14:92:8e:da:20:22:bf:
5e:99:c1:11:ec:dd:dd:93:9e:a2:03:6f:c9:1b:a6:59:dc:84:
d7:f6:6c:96:9b:77:6f:2f:cb:70:01:14:e1:18:a0:bf:78:61:
50:3d:ac:9e:0e:4f:c4:55:2b:9c:76:40:2f:2b:9c:38:08:f0:
ce:e8:a7:d1:ca:4a:6d:e8:ee:29:3c:77:c5:96:7d:c1:44:de:
16:4c:50:5a:01:e3:e6:69:4b:e7:c1:97:a3:ae:2a:f9:6b:26:
71:c8:77:66:e2:d6:77:24:96:88:05:c8:8d:a2:c5:58:c7:cc:
7b:1c:52:67:0d:b9:55:81:2c:c9:0d:ec:71:ae:ad:37:44:ca:
0e:40:30:2c:4c:7a:e2:1a:aa:b7:76:07:40:63:2f:80:c2:4c:
06:75:80:b9:49:6b:83:2f:2b:85:a9:3c:e6:a1:c1:49:0f:59:
52:7d:0a:a4:01:6a:6d:27:5c:28:17:4a:1e:ea:4e:9d:ab:b8:
0a:60:db:d3:05:1d:48:16:87:1e:8b:d6:71:6d:9d:e1:ea:24:
d4:f4:59:95:3f:f7:49:da:01:f2:ea:a3:4e:c8:83:d7:b5:c7:
8f:43:63:43:f5:79:fa:e0:1c:8b:4d:6c:fd:03:e6:dc:18:0a:
65:8f:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:08 2025 by rpki-client