Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: cuAUob3dtWcj1fMGJM//+S04nyavZU7sfeblvgcXW8s=
Subject key identifier: 05:40:7B:6F:F7:57:12:3B:E8:5D:23:6F:AF:D1:59:09:2E:8D:D7:65
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 019D37890D28BA12F3395C6E433D60C27102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 07F0
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: qUoqNxByxVvV9Y9ddNvak04mWOwLsWueN0iMS8yDoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0d:28:ba:12:f3:39:5c:6e:43:3d:60:c2:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=05407b6ff757123be85d236fafd159092e8dd765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:a6:9d:df:64:00:58:79:b6:a9:8a:9e:ba:
91:5a:8f:48:ea:be:ed:b8:6e:c4:0c:e0:62:13:32:
c9:8f:5a:45:9d:a0:60:e1:6b:22:da:15:19:00:38:
9f:39:ea:52:e6:0b:a3:a5:bc:a6:65:63:47:5a:c4:
ae:98:dc:62:a8:be:20:01:54:37:10:b8:f7:c0:af:
d3:eb:5f:ae:15:71:4f:a6:69:e4:33:21:66:ab:42:
cf:d2:22:14:b4:fb:8b:84:98:78:52:cc:0c:43:75:
d4:30:4b:b7:78:2a:e9:5a:99:73:cc:d0:ad:8c:c1:
d9:26:f3:22:54:5f:a5:17:43:48:f4:dd:d9:ba:3e:
fa:40:20:8d:bf:21:d8:66:63:09:9e:88:24:10:9a:
85:54:fb:2a:30:09:71:3f:bc:d3:6d:e8:1d:52:5f:
92:2c:7e:25:bc:5f:d8:63:43:57:ae:bb:81:48:26:
97:79:06:55:00:65:f6:2d:bf:19:96:6b:cd:82:83:
ce:73:83:4c:ef:40:56:34:40:2d:40:77:0b:2e:cc:
3b:47:3b:a0:64:8a:f7:be:75:25:65:2c:68:aa:d6:
d0:58:79:06:be:ee:35:fb:90:93:dc:29:2f:d8:3e:
35:28:f8:d0:d3:e0:c8:be:b7:03:7c:25:45:ed:7b:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:7B:6F:F7:57:12:3B:E8:5D:23:6F:AF:D1:59:09:2E:8D:D7:65
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:00:ba:66:94:95:7c:f4:1b:f7:f6:36:db:5e:c5:6d:a6:
84:ef:8b:d7:76:02:80:fc:b6:aa:16:03:02:59:60:33:8e:c5:
25:79:63:ee:96:54:af:05:39:cc:bb:fc:b8:b8:c6:5c:35:a7:
78:6b:bb:f1:77:ff:3a:eb:2d:90:fc:6b:4a:b3:6e:56:f1:b8:
c1:dd:7c:55:a7:57:67:e7:4e:6e:18:38:11:f0:44:9a:f9:c6:
c9:3e:dc:e4:d6:d7:3f:7a:32:19:05:da:0f:bc:72:30:59:4f:
07:e0:d0:1b:29:1c:c8:2d:5b:8a:3b:45:8e:91:a1:5b:91:4d:
99:63:dc:44:ad:c1:b2:08:ea:60:01:c7:fe:de:ae:39:66:3b:
a3:03:56:44:3f:6a:c0:b8:aa:c5:04:22:c2:5d:fa:15:55:72:
83:49:d4:a8:8a:3e:a2:d3:fe:6a:2a:ac:12:29:20:c5:ed:6a:
64:4c:04:a4:e8:0c:28:9e:91:5b:23:89:ec:85:4b:a4:ab:9d:
2b:fb:1d:3a:40:1e:6f:05:e4:e3:fd:3d:ef:4c:14:42:12:d3:
16:c2:2d:d6:e5:4d:de:d1:aa:37:b2:89:2d:7f:12:00:43:67:
02:20:1a:2f:bb:d0:68:91:4c:5e:93:7a:72:83:9a:9d:70:2f:
53:2f:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:58 2026 by rpki-client