Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: D/RFLc7bDES+IpoTojZaXMfRENKxdKSP6ChVo9AE9KE=
Subject key identifier: 93:0D:CF:38:85:5E:64:B2:38:1C:B4:6D:90:03:E7:6B:ED:9F:68:8F
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 0199FD346E49DBA8C34B5F7B82F53E3C38D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 1014
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: q9VY8tmzuWV4Prfi3Hwx2yCmqc3d+c58Fd1QIt7cYhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6e:49:db:a8:c3:4b:5f:7b:82:f5:3e:3c:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=930dcf38855e64b2381cb46d9003e76bed9f688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:b3:15:d9:35:68:60:36:25:b6:eb:11:d4:
fd:06:88:ca:27:76:36:75:57:a6:d9:01:9f:8b:e7:
71:15:56:40:7c:e1:3c:4d:92:2f:40:8a:41:f2:c7:
01:42:e9:be:1c:df:8d:9c:38:2b:89:aa:8d:65:9a:
9e:f8:ec:7e:1c:45:5b:6b:e5:05:33:41:54:f7:ac:
1f:5b:ea:31:da:54:e5:b3:13:1b:01:98:c0:25:e9:
dc:00:16:34:11:75:22:73:ed:7a:5f:12:87:40:62:
ec:41:67:c6:5b:19:de:27:ee:d4:ab:ef:44:d5:d9:
db:74:b7:e5:56:cf:80:ac:6b:0c:2b:eb:61:2a:57:
42:36:df:55:9f:20:63:0a:a9:1b:44:3a:af:a9:de:
f0:f0:1a:2e:b4:6e:0f:b3:c2:cf:f6:28:9b:1b:f3:
00:12:b7:ed:db:cd:d8:9b:f8:4d:f8:96:95:28:cb:
28:8f:9e:dc:0e:1b:94:a2:4e:99:9b:69:3f:de:5e:
6c:89:0a:4e:31:0a:16:af:7d:44:fa:60:c5:24:fb:
8d:92:0e:bd:91:6d:5a:8b:42:9f:49:c2:a5:d6:d6:
a8:52:38:a7:ed:ac:25:98:a2:95:61:2d:2b:41:8d:
f6:d9:19:35:7f:00:6e:ac:13:fa:6e:63:08:02:1e:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:CF:38:85:5E:64:B2:38:1C:B4:6D:90:03:E7:6B:ED:9F:68:8F
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5f:f5:3c:2b:7b:e8:01:d9:37:62:de:66:78:5b:14:9a:14:
03:ce:8c:c6:b4:20:75:82:97:aa:49:b5:5b:13:d4:f5:ad:0b:
b3:6b:d4:fb:e8:a3:1e:b2:b7:f3:88:47:c4:73:1e:2c:c2:ff:
d9:38:c0:5d:3b:ee:7b:57:08:39:b1:d3:47:83:91:14:c4:25:
f7:02:c1:8f:a7:ec:b1:9b:22:a9:92:07:05:1d:80:ed:b2:47:
0f:74:6b:27:ea:c2:1c:aa:03:e0:31:30:0f:29:df:bb:37:cd:
7c:00:a7:91:0d:5f:0b:63:81:58:d7:44:46:bc:f1:bc:1c:4a:
78:f7:38:4b:47:59:2c:19:1a:8f:5d:34:30:2c:1a:25:2f:86:
a4:58:e6:7e:db:bd:f5:3c:31:46:8a:34:43:94:ef:9e:4f:6a:
74:c9:4b:c6:1d:70:38:cc:a3:e1:2d:1f:a0:3d:0d:2e:bd:e3:
42:09:6f:21:4e:f3:91:fe:9b:4b:03:49:55:76:bc:e7:b8:67:
57:08:0a:66:61:ea:ef:34:1a:74:e7:e6:57:d8:08:e4:3f:46:
ea:ce:42:0f:77:83:ee:cb:40:97:b6:78:c4:68:de:04:b8:c9:
ba:8b:30:1f:9e:9b:02:90:46:48:b7:c7:79:61:ac:e5:39:91:
b7:c7:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:14 2025 by rpki-client