Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: QE43cJTowUhF7Di7SqNwRYzZYxw+J1FJk23YQoMnlRg=
Subject key identifier: CE:28:57:05:13:0F:D2:DD:97:E6:01:F8:AA:36:A0:37:74:18:48:F3
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019A71B7F3332521B369EDEE061884510CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0A65
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: 1BTGuAdYvGOEp+1/r9mpZahP1F2D4QJ9S1y9Q3HsjAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f3:33:25:21:b3:69:ed:ee:06:18:84:51:0c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=ce285705130fd2dd97e601f8aa36a037741848f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:df:95:18:07:e5:f4:7c:2d:73:16:dd:6e:
70:5f:40:bd:36:dd:45:b8:2c:47:35:f1:d0:c0:33:
5e:9f:2d:2a:14:10:4b:f7:f2:97:3a:e3:12:96:37:
c3:34:05:e7:9a:8e:c4:ed:63:29:07:0d:3d:8d:b0:
ac:c5:a8:76:c3:a8:a3:86:ea:a9:52:92:cf:66:8c:
cb:c0:1f:66:81:5e:16:0b:e8:ac:ca:2d:91:3c:dd:
84:6e:25:76:d3:47:ca:15:00:a6:29:7c:06:59:2f:
31:f8:76:7a:c5:03:49:76:e9:5d:ab:15:24:92:53:
c6:9b:2f:9b:52:c5:99:80:24:6f:f8:07:45:0a:81:
7d:0f:90:0b:48:a3:98:b3:c5:04:eb:66:64:e6:1b:
90:8b:77:d6:a5:3a:9d:4b:ca:2e:71:11:e3:5b:68:
a1:bd:a3:02:e7:93:de:27:70:4e:39:2b:e9:38:1c:
24:0e:21:34:9b:be:0a:1c:d7:b5:9e:a9:6c:8d:0a:
68:2d:f3:cf:4a:d0:aa:01:d0:e4:e4:07:5d:96:29:
86:f5:2f:09:c7:e4:50:70:c8:ad:fd:87:59:65:1c:
ee:2c:8f:30:01:47:a2:79:3a:db:97:6a:8c:c5:1a:
cb:ca:b0:ef:b6:90:cd:22:3d:77:5b:8a:49:8c:dc:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:57:05:13:0F:D2:DD:97:E6:01:F8:AA:36:A0:37:74:18:48:F3
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fc:cf:91:55:30:cc:a5:24:6b:4e:2d:a9:93:37:3a:66:fe:
b3:b0:07:74:61:d4:40:90:74:6b:d4:c4:dc:96:09:3c:9c:a4:
7c:80:9f:ed:01:f6:c8:eb:24:be:75:ef:33:fb:b4:55:fd:32:
cd:09:61:38:46:7f:7d:91:70:95:cc:ad:e9:96:69:3b:9f:82:
0b:b8:25:87:7a:3f:72:99:da:0f:cf:aa:0f:0d:9e:35:3a:21:
a5:0c:f3:a2:19:a9:99:58:1d:3c:5b:2c:be:f3:14:7b:69:e6:
da:61:ad:96:62:c7:f4:fe:b4:66:ac:e5:9d:d6:6b:06:6b:90:
13:0f:47:d2:8e:51:04:b3:aa:69:30:74:b1:38:fa:d1:82:4a:
1d:39:73:7b:3c:b5:a7:d6:d4:8d:36:2c:5e:1e:a4:c9:2b:ca:
40:77:13:b0:d0:e6:c3:35:29:11:5c:dd:27:f1:04:f7:14:68:
8f:8f:e3:54:37:b9:b7:06:e6:8f:c3:80:8d:b8:a5:42:77:fe:
e5:a2:8c:fc:42:f9:ae:40:6e:1e:31:76:0a:6b:13:3d:11:92:
9e:2b:8c:0a:7e:08:c7:8b:a3:19:d4:3f:6c:c1:8f:ff:fc:fa:
4a:62:6f:d6:bb:fe:a6:4a:0c:3c:8f:dd:be:a9:5b:5d:bd:6e:
e0:84:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client