Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: cu5xLWjox76S2D0VPpBv7jdJQJtf2xrKp2o+5dVyBAA=
Subject key identifier: 51:F1:9D:B0:67:7B:F3:E1:F5:6D:28:6D:34:A6:7A:A4:A7:96:43:CE
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019A7225E93FEDC21E5F35F1335ACFAAF790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: 7hBV7grP8sS/EsuG67xKdojoONgCOikydMSidAaRsik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e9:3f:ed:c2:1e:5f:35:f1:33:5a:cf:aa:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=51f19db0677bf3e1f56d286d34a67aa4a79643ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:93:ba:4c:68:b7:9e:dd:0b:ce:cf:a1:90:
8e:3d:91:31:a1:09:9e:98:53:99:0a:ce:2b:e1:73:
b8:bb:d3:60:e5:3b:89:99:7c:bb:17:08:95:0e:7a:
69:98:77:e1:0e:39:60:ba:83:b7:4c:3d:58:01:ef:
8a:47:f2:6a:25:59:a0:24:6e:c5:51:10:e0:87:c8:
59:19:1c:4d:a2:e0:42:26:18:95:36:34:5c:c2:9b:
25:ca:b7:bc:2f:ab:9b:87:c2:db:95:69:8a:23:dd:
a4:61:17:7e:60:74:95:3d:93:ff:d3:67:99:45:22:
b9:f3:34:f0:4e:e1:af:69:9a:2f:ea:30:26:e8:bd:
13:d6:53:9e:0d:2c:46:8b:48:73:56:fe:c5:71:f3:
f8:8e:9c:5e:d8:53:3d:1f:5b:a2:e1:15:d2:27:c9:
79:1f:50:50:72:e6:3a:0e:40:77:93:18:bf:a7:58:
ac:29:0b:b6:93:7c:28:67:cb:6d:4a:e6:cc:fa:cb:
22:99:4b:28:91:bc:87:aa:b6:51:f3:39:1b:f7:39:
bd:d4:fe:c0:dd:0c:5e:63:de:74:a4:7c:ad:a3:0b:
b7:07:bb:ab:df:54:98:7a:8b:f0:59:78:73:62:20:
78:c2:2c:40:d9:2b:03:32:a3:a3:78:97:43:fb:af:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:9D:B0:67:7B:F3:E1:F5:6D:28:6D:34:A6:7A:A4:A7:96:43:CE
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:f2:08:ea:4c:06:93:ef:25:bd:70:8e:93:1e:27:71:88:
2f:c7:5b:b5:5e:e5:9e:9b:d5:09:26:79:48:7d:8b:cd:9f:20:
9f:e5:51:ed:da:80:43:b8:70:4f:88:5c:fd:97:50:73:cb:c0:
ac:33:b7:71:89:04:21:50:27:99:09:ad:64:c5:84:1c:ea:19:
0f:b0:f3:4b:de:7b:72:fe:5d:bd:0f:96:78:5f:1c:4f:0e:46:
36:df:b0:ad:00:04:13:16:5c:68:5c:28:3f:c6:fb:55:5a:75:
f8:c6:31:fa:f9:86:fc:a4:02:f4:66:f5:b6:33:16:a9:49:76:
93:e4:51:d6:20:48:19:ef:c4:c2:70:04:c5:45:be:3c:8d:e0:
25:2e:5f:34:57:3c:9b:ea:5b:ce:53:c8:5c:f5:06:15:c5:c3:
f1:0c:27:14:3d:6c:79:17:f3:b8:0c:7b:ce:88:8d:d0:ef:36:
75:a7:f4:d8:3a:57:60:69:c8:73:5a:e4:9e:95:e9:56:3d:0d:
33:a4:f5:6b:15:98:35:81:44:23:1a:73:23:2a:13:66:ea:99:
bb:13:c9:c9:3b:7a:1f:55:f0:9d:78:1b:0d:c5:43:34:69:87:
a3:92:80:88:bb:f4:8f:5e:25:1b:6c:8b:4f:b9:d3:1d:a5:44:
b5:92:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:50 2025 by rpki-client