Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: m4bfji6xEcXJeo3HJjKkz7fQfgxsLWOhQYOpS/Dreuk=
Subject key identifier: B6:1B:C7:88:29:A7:9B:9E:63:C6:5A:21:7B:CB:14:4F:81:03:33:54
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0199239F657AB7E696B04C6DA3A5E09C8FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:12 +0000
Manifest this update: Sun 07 Sep 2025 10:01:12 +0000
Manifest next update: Mon 08 Sep 2025 10:01:12 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: 4hbDxeCBzBVBdpzjP70VypcMz3zOSjTcSVynYQLOVms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:65:7a:b7:e6:96:b0:4c:6d:a3:a5:e0:9c:8f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Sep 7 10:01:12 2025 GMT
Not After : Sep 8 10:01:12 2025 GMT
Subject: CN=b61bc78829a79b9e63c65a217bcb144f81033354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:69:de:ff:7c:6c:ee:6d:d0:a1:ff:8e:be:
d6:83:7d:89:10:9d:12:47:72:f3:72:1e:c3:cf:63:
a4:86:4c:0b:a2:8f:79:db:8e:e4:1b:78:63:9f:a4:
f3:0a:de:43:92:69:98:19:f6:85:6f:5f:db:8d:1a:
ba:08:81:f0:80:67:72:49:c0:bb:1e:4d:a0:17:45:
80:67:92:74:d1:5f:40:4d:40:3c:d7:c9:04:ba:f6:
d9:47:2a:25:69:b0:26:55:eb:a1:56:0a:b6:98:89:
e4:ac:c4:bf:db:08:10:fc:0b:b3:2a:cd:d7:de:f9:
1b:0a:67:70:fb:51:e5:2f:fb:d5:5f:2a:c0:d9:57:
e1:08:18:58:ec:06:d4:3e:8a:fa:09:95:27:aa:4a:
e9:66:e0:e1:b6:7e:15:2b:e8:8f:93:45:2f:67:1f:
5c:82:b6:f4:ee:85:bf:af:52:27:db:d3:32:b7:eb:
a8:0c:e7:04:5f:b1:a4:a7:a3:80:ea:1d:a3:9c:2e:
36:fe:35:c7:be:b2:60:d5:58:43:fa:86:b5:56:c9:
00:a5:8e:72:8a:00:ff:08:f8:80:6f:c8:23:58:f2:
cf:d8:d8:58:71:69:6f:b6:62:03:46:35:1b:5c:cd:
55:67:2a:ed:49:86:52:49:8d:1e:6b:7e:46:76:e0:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:C7:88:29:A7:9B:9E:63:C6:5A:21:7B:CB:14:4F:81:03:33:54
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2e:ea:91:b4:83:5f:78:62:4b:4c:0a:26:15:bd:f1:bb:ce:
13:69:57:90:e1:f8:5a:fe:26:9b:e4:ad:3a:5d:47:6d:b6:81:
52:8b:2d:40:11:00:14:c4:e7:b4:78:6a:52:2d:5f:a0:2c:08:
5c:f1:11:20:ec:90:fd:20:70:c0:62:39:d4:c2:a8:e5:ee:e7:
6f:af:e2:ee:d8:c7:58:32:10:30:27:c8:e8:44:41:b2:09:ca:
b9:e3:a3:9f:6d:28:bc:c2:19:54:bd:3e:1c:b5:be:15:01:6a:
15:06:01:e3:79:b7:5f:08:8c:b2:3c:8e:d5:c6:2f:b7:f0:50:
af:08:3f:12:0a:d6:f6:1a:18:85:b4:78:50:9b:d8:f0:29:02:
80:82:94:f0:f6:ea:ed:79:04:99:ce:3b:6f:0d:77:a6:34:1d:
df:bd:40:75:c8:9d:46:e4:d1:19:33:6c:fa:2d:69:68:1c:c9:
c0:b3:d1:7b:f5:78:51:41:4c:d9:ab:6e:5f:69:85:0c:81:be:
b7:e8:90:0e:64:61:11:df:8a:bc:01:b8:7f:d6:63:d7:99:51:
69:7a:80:2c:d9:7c:f6:27:d4:96:18:d0:0d:c6:08:f0:ec:e8:
ed:51:af:2a:0d:09:d5:3c:0c:28:e8:36:9e:ae:1f:a3:2f:91:
50:18:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:34 2025 by rpki-client