Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: 4GpM6TEHnT/md4JyIhGS1fcKPTFheGUDTL6z5gulZ34=
Subject key identifier: 29:A7:1B:14:B1:06:45:70:D5:71:57:18:26:E8:B0:57:9C:8C:6F:01
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019A7293FB6AFE4273FC203C77ECC802B082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 154B
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: Xzg6GFng6P8lqi5xFUvuShORAk+0xMtilaxSheT5/YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fb:6a:fe:42:73:fc:20:3c:77:ec:c8:02:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=29a71b14b1064570d571571826e8b0579c8c6f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:79:ea:3a:5c:79:9c:6d:d0:d7:bc:f6:f3:
98:7b:c5:b3:20:b1:f2:80:52:2e:41:8f:d3:d7:bd:
35:e4:3c:79:75:0e:9b:02:b2:44:7a:5b:97:5a:dc:
fe:64:b0:4f:7b:d9:73:bd:24:7a:c6:b2:39:4a:e4:
12:cc:e5:8d:a5:b3:9b:43:1c:28:f1:28:b3:fc:9c:
34:f1:a4:2c:0f:b8:4b:65:1e:17:16:57:e8:da:6c:
f4:69:21:83:4a:60:d1:84:68:00:7a:f5:fe:70:4c:
18:56:a3:61:bb:19:8b:34:3a:4f:ea:3c:9b:22:04:
93:1a:bf:5d:f7:f4:43:b3:b9:d6:78:33:96:08:32:
48:00:9b:47:c8:73:41:29:f8:94:70:0f:1f:9c:a8:
b6:b7:95:c4:37:0f:d2:6a:16:21:dc:3b:5c:b1:40:
b6:71:97:e1:7c:b8:aa:10:dc:cd:c7:da:eb:0b:6a:
78:95:4e:94:80:5b:1f:8b:0d:5c:75:85:dc:10:07:
3f:b3:36:e2:3d:07:c0:8f:42:48:f7:6f:af:75:e6:
5e:98:29:9f:79:6a:fa:f6:dd:78:f4:47:d6:fd:0b:
78:2c:a9:34:d4:06:95:b2:89:96:d1:16:6e:60:fc:
ab:cf:fc:48:09:44:dd:7e:5b:20:14:9e:56:16:9d:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:1B:14:B1:06:45:70:D5:71:57:18:26:E8:B0:57:9C:8C:6F:01
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8c:59:f1:be:57:b5:4e:08:3a:00:04:2c:44:ec:42:c2:fd:
ee:eb:8c:26:9b:67:8f:49:0f:e3:ad:f9:26:ce:49:87:70:f2:
a0:67:1e:a6:79:57:64:63:d0:b0:b0:92:79:90:fe:b2:ee:48:
08:42:e2:76:c6:05:cd:1d:ca:8b:3b:40:84:a2:f7:fb:65:5e:
e7:05:ff:60:6a:bb:f4:f8:99:5f:3a:7c:ff:ea:50:14:16:26:
40:04:96:93:bd:47:84:2b:17:a4:b9:6a:2a:d4:d9:77:85:80:
6b:dd:be:f3:6d:15:d4:1e:d3:f4:64:5a:5d:22:60:d3:29:bd:
1e:60:c6:2a:ad:ab:95:b3:f2:0e:b3:05:e6:21:77:e2:cf:6d:
93:c3:97:c1:c2:48:7d:9b:92:47:f2:e7:0e:c9:ce:4b:d8:cd:
01:8d:17:d5:d8:5e:4c:61:49:eb:35:a8:bc:a6:ed:70:1d:24:
e2:be:f1:db:6c:35:5f:3f:b3:e9:6b:74:bb:7b:0e:77:e6:d1:
3b:2e:a9:da:4a:6d:b9:96:1c:0f:a2:ce:3d:a7:83:90:b7:e0:
a6:25:c9:3e:26:01:0b:86:77:64:00:e2:9c:29:48:1e:11:2d:
2d:9a:e0:42:62:04:37:9e:a2:6f:67:c7:14:42:a6:7d:a4:ee:
69:ab:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client