Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: SNzGa9R2vGLyeq1E1Fju+ugdZP/RNs1HFIQe02TSRZQ=
Subject key identifier: 76:2F:95:1D:3B:96:9C:0B:5C:D8:F9:B7:1A:F8:BF:E9:D8:47:B2:A7
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019A1C5045A756432BF6C80BA21550E94CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0F1D
Signing time: Sat 25 Oct 2025 17:00:14 +0000
Manifest this update: Sat 25 Oct 2025 17:00:14 +0000
Manifest next update: Sun 26 Oct 2025 17:00:14 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: im7pZoIVfsWATnCQ9Yp3q0S9JvSkxpL78dII2ofAC9s=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:45:a7:56:43:2b:f6:c8:0b:a2:15:50:e9:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Oct 25 17:00:14 2025 GMT
Not After : Oct 26 17:00:14 2025 GMT
Subject: CN=762f951d3b969c0b5cd8f9b71af8bfe9d847b2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:43:31:38:04:90:78:74:29:19:db:41:0c:
e0:f5:c1:dc:47:7f:38:3f:15:09:ac:17:1b:fa:d7:
20:56:62:fb:2b:9d:0b:03:aa:b1:be:31:14:41:80:
b4:72:21:7b:42:d6:3b:c1:44:c3:48:b5:9d:04:ef:
aa:41:6b:0a:e6:bf:6c:e8:95:c1:d4:d7:a8:42:47:
ff:9a:07:8f:58:af:9f:d2:3b:ac:b1:89:1e:13:1e:
ce:58:81:66:02:4b:2a:4a:8d:e7:2e:c9:8a:9d:70:
1b:59:98:50:3e:84:80:63:f5:5f:b2:8b:ef:f1:73:
53:ac:e4:8d:39:50:9f:70:cd:c6:9d:26:fe:8f:77:
d4:a0:75:66:16:59:b9:9a:e0:85:cf:0d:59:3b:23:
e4:5f:45:fe:26:b7:6a:32:8a:5d:09:e4:00:f1:40:
1d:7a:5e:42:41:8b:0f:75:68:57:13:86:d1:d6:77:
31:8c:7d:40:90:c7:16:52:ae:89:77:9d:47:21:d6:
93:8b:45:e5:66:d8:ef:c2:c1:7b:61:32:09:f6:1c:
8c:b8:fa:6d:80:47:e0:b6:b1:25:04:31:d7:75:ba:
d1:56:4c:3b:33:30:8b:89:b9:c5:4b:df:40:d0:bf:
29:3d:95:f9:8a:00:d2:42:0d:5e:1f:7c:e7:07:6f:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2F:95:1D:3B:96:9C:0B:5C:D8:F9:B7:1A:F8:BF:E9:D8:47:B2:A7
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:81:e9:cb:1d:5d:81:e9:0e:a6:69:07:79:71:56:5e:a0:16:
14:5c:ae:96:4d:50:c4:2c:b3:36:eb:96:67:07:f6:82:5e:4b:
24:2c:ae:0a:6b:e2:e3:78:db:df:5c:90:94:f1:52:b6:45:04:
31:46:84:97:28:9a:0e:bb:c4:04:09:f2:1c:f3:f9:41:07:4f:
6e:85:07:17:d3:f2:d6:c7:92:93:70:cd:2c:fe:35:b5:43:18:
6d:10:4a:80:a1:1f:84:59:b4:88:93:0d:ad:a3:61:4c:63:56:
8c:60:1a:6f:c7:b7:83:f6:a1:d1:eb:fa:ac:d3:30:e7:9b:cc:
74:fa:8f:45:d1:e2:0f:f6:d3:13:e9:ec:39:b8:77:ab:32:a3:
7a:d6:50:89:b2:6b:20:c6:06:21:ee:08:ad:35:36:63:27:4c:
a9:c7:a7:ab:21:57:c8:ad:5b:ea:c8:e3:8d:82:89:01:b5:61:
a4:84:bf:45:25:68:f2:b0:42:11:2b:e6:51:00:62:ad:6c:7a:
d6:3d:41:23:c4:18:32:69:ab:ea:73:a5:69:e0:e2:21:f6:1a:
59:30:5b:aa:73:ee:8d:e3:50:ca:d6:fe:a1:32:c7:c6:7d:f5:
f3:08:47:ff:84:08:a2:69:2e:8f:00:31:ee:3b:ac:b7:d6:a9:
1b:c1:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:09:36 2025 by rpki-client