Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: WlwWUAwNGE5AomJxBjQ4T0K5R1zmmHN5DzBtofYJ2oY=
Subject key identifier: 7D:DE:AD:7E:D7:E9:FD:11:45:B0:D9:04:ED:E2:F7:2A:52:18:F1:27
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019A725CBDC2136B627D9F6EEB6C71A117B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: w9b7K8JwvLU8r61zZny/PZ0hrnb0VkuTzjbszoeHcVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bd:c2:13:6b:62:7d:9f:6e:eb:6c:71:a1:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=7ddead7ed7e9fd1145b0d904ede2f72a5218f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:a6:56:2d:90:ea:0e:05:ae:6e:ef:31:cd:
85:8f:a8:c4:a7:c7:e7:73:29:16:54:c5:b2:5e:14:
6f:db:88:a3:40:b7:35:29:77:7f:ea:9b:ae:8a:e2:
93:3e:4e:13:80:75:a3:ad:95:09:18:79:39:87:6c:
26:d4:bd:d2:b6:83:c0:ca:47:04:e7:1d:78:17:de:
ef:9f:d6:15:51:62:c5:d8:fe:81:7a:13:7f:a2:68:
34:16:2b:4e:0b:46:ba:b6:be:38:e4:cb:64:ff:34:
4f:61:90:3e:b1:ec:49:e0:c3:ee:64:29:46:9c:8e:
89:ed:3e:1a:98:77:16:21:4f:23:fc:6f:88:09:7d:
ec:40:4f:02:44:05:c1:92:c4:5c:5d:ad:d6:f3:d8:
34:6a:ce:f9:4c:e2:21:e4:32:76:4f:ac:b2:42:29:
53:92:de:f4:48:d6:8c:5a:4e:3d:34:f4:7d:70:f8:
ed:19:58:f8:a4:3e:ee:a1:28:37:c4:0e:84:8d:2f:
40:53:b1:eb:b5:f5:c8:e2:72:d5:bb:e8:9a:a8:7d:
1c:1b:b9:d9:f5:a6:dd:1f:89:69:37:83:66:33:de:
9f:63:9d:3a:94:58:35:0c:3d:ef:f4:b5:b2:e4:ed:
93:18:ab:84:57:f6:78:06:75:56:3d:4f:cc:fa:a8:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:AD:7E:D7:E9:FD:11:45:B0:D9:04:ED:E2:F7:2A:52:18:F1:27
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:5e:1b:65:84:a6:c1:38:91:e5:a8:38:10:13:5f:32:68:
9f:48:b8:7f:b7:a2:fa:35:17:b6:d2:6e:f0:9b:54:e0:bf:95:
5f:d9:50:da:ef:3c:49:f6:b2:05:45:9a:b9:80:c4:83:48:c2:
9f:3a:5e:e8:3e:9d:0e:e9:8e:d9:99:ac:83:70:94:ac:98:85:
cf:37:0c:05:0a:73:28:77:fe:b2:4d:f3:1d:e3:23:d0:88:1c:
e9:27:9e:25:16:d8:96:7a:33:53:d8:3a:9d:3d:3e:32:e0:05:
11:73:d5:b5:52:4b:5b:f5:d0:09:19:5d:8b:ca:17:52:49:67:
7a:a7:83:39:39:21:7f:b0:11:10:14:d9:9c:01:10:30:95:39:
62:8a:90:92:9d:f9:54:3e:b3:6e:02:25:5a:6c:50:af:e1:09:
0e:d0:e4:b2:10:e6:0a:0a:be:98:36:36:94:43:c9:15:63:b7:
e9:a1:4d:3c:a7:e6:96:39:d6:53:e1:c1:43:bb:07:b0:48:e8:
0e:61:b6:3a:38:11:f2:40:ff:38:f7:c7:16:8b:c9:3f:7e:75:
6e:1e:e8:b9:25:53:0d:73:13:9f:1d:c4:82:2e:0c:30:10:f3:
c8:75:40:11:22:67:a3:ae:ff:ec:72:32:a6:a2:f8:53:e3:cb:
9d:a7:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client