Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: oc63h6CdqX9J6Eb/EXnfCAbVON8LIeZYowmOGzAjkKU=
Subject key identifier: AF:F4:07:C7:A2:7D:7C:B4:45:58:C7:8F:A1:DE:60:1D:87:76:E6:34
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0199239FD46DDFDDED30D982511665F9501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 09B8
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: iQLLn0HN+uih7abq2zpCp7PaUxvZSYFCjiz76WItNgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d4:6d:df:dd:ed:30:d9:82:51:16:65:f9:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=aff407c7a27d7cb44558c78fa1de601d8776e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:d1:6b:3e:1f:36:11:9b:ec:3d:a0:a7:ac:
30:e9:44:81:ea:1e:5a:71:c1:a0:78:ac:48:d2:80:
61:cf:ea:68:60:53:26:c1:0a:35:94:f8:be:77:a2:
4f:5d:67:08:a2:ba:5d:e6:25:d3:7b:26:3f:26:1e:
80:4b:68:8e:4f:f6:1b:26:c1:53:2a:2f:d8:11:52:
df:11:ba:d7:bb:15:99:a2:f3:8f:b4:63:bd:e6:ac:
0b:11:61:97:e1:29:f0:74:48:d5:bf:2a:bd:0a:9b:
c6:36:79:5a:26:a1:f3:9f:69:60:3e:8d:46:a7:53:
7f:5b:18:22:a1:04:fa:dd:c8:5c:8a:2a:32:74:67:
ae:a8:c0:8a:de:8f:21:22:5e:ad:f8:83:97:36:c9:
ba:75:d6:56:74:c8:20:70:a4:4f:cb:15:52:19:6a:
f0:1e:0c:e8:ca:ed:78:93:7a:1d:18:4a:c3:0c:55:
65:a8:e6:58:c5:a5:00:5e:a9:5c:57:64:2b:80:36:
b9:85:2b:13:d6:d3:31:d4:81:f5:9b:0d:2c:dd:1f:
d3:65:f6:e1:f2:54:25:6e:13:10:58:e6:55:e6:c2:
5d:56:a4:71:9a:c4:cf:83:56:a4:67:36:b5:74:ee:
2d:14:f1:dc:e1:28:00:30:4a:a5:27:09:07:60:1f:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:07:C7:A2:7D:7C:B4:45:58:C7:8F:A1:DE:60:1D:87:76:E6:34
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:52:24:c6:ae:d2:31:ea:5c:50:81:cc:f1:77:28:bf:5d:
e3:b3:46:7b:83:53:f8:be:c3:ac:36:68:79:c8:82:f3:79:35:
96:c0:2d:af:8e:61:61:f8:88:06:cf:e5:e4:5c:88:b2:d9:8b:
a3:45:a3:12:e8:5d:66:4a:cc:53:13:bc:78:20:5b:cf:31:b6:
d1:f9:c2:90:6d:9e:bf:2e:f4:54:e3:07:5b:39:ec:83:7c:67:
24:ca:80:bb:d3:8c:f8:16:ac:fa:ab:a5:5b:30:d9:58:01:57:
56:ce:d8:98:42:d5:9d:10:2d:26:68:92:0c:11:c2:60:0d:ea:
a5:f5:62:a3:95:7b:83:be:19:27:37:85:4e:bd:dd:18:04:ab:
eb:e3:d4:36:11:74:1a:f4:8a:9e:c6:0d:db:1e:0b:66:54:40:
59:38:eb:79:13:28:6d:8b:3c:28:62:b1:39:a2:35:7b:43:da:
cd:d1:2d:f8:46:ad:45:55:3b:3d:67:06:c6:f2:28:07:f6:ec:
3d:2a:83:c6:70:cb:49:73:5f:d9:54:14:fd:9a:2b:4e:75:6c:
92:04:64:7a:ab:ef:3d:f0:f6:d2:75:8a:1f:3f:99:51:ed:3e:
ef:d1:70:cb:2d:6f:21:04:47:1e:e6:62:ee:de:17:62:67:80:
d6:cc:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:24 2025 by rpki-client