Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: 4pbnpqUE+tk3j5rS13KhFnClr3xZcHApWfoh1Ry3ajw=
Subject key identifier: 76:D7:2F:61:AD:91:54:8A:E3:B1:08:F2:56:85:D7:6B:7A:3C:49:19
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 019A2855582CA5D38CCBB94D10A4C7024171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0C4F
Signing time: Tue 28 Oct 2025 01:01:13 +0000
Manifest this update: Tue 28 Oct 2025 01:01:13 +0000
Manifest next update: Wed 29 Oct 2025 01:01:13 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: FdA4b+5MMAzbgOBvP+OyNCnVtWDzbZaFRr552rhtQIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:58:2c:a5:d3:8c:cb:b9:4d:10:a4:c7:02:41:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Oct 28 01:01:13 2025 GMT
Not After : Oct 29 01:01:13 2025 GMT
Subject: CN=76d72f61ad91548ae3b108f25685d76b7a3c4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:5e:a1:ae:19:e8:eb:e4:25:9d:bf:3c:0f:
28:b1:97:de:35:21:73:33:68:c3:d3:14:8a:f8:64:
0a:9d:fe:b4:9b:28:c5:14:c3:52:bb:1c:88:60:60:
3d:87:35:bd:b8:32:44:16:55:a3:ba:d4:ef:06:0b:
e5:78:ef:c4:17:2a:5d:c0:e2:73:b2:0d:5e:9b:ca:
54:cd:c6:ec:78:79:3b:44:ae:12:13:6a:01:d6:0d:
b9:45:73:69:66:c0:ed:b2:47:48:1a:bf:12:24:9b:
b4:46:02:91:ef:39:15:37:1e:b0:f2:05:47:9f:8a:
04:7e:8f:0b:3c:96:5d:5e:93:74:4e:17:c2:da:23:
a2:6f:4a:13:00:04:71:cf:c5:da:c0:2d:c4:65:31:
f1:a9:3c:7f:e9:e3:a7:cd:60:b4:c8:3f:dc:f2:35:
a0:43:79:99:88:c6:a7:b0:6a:52:b3:34:e0:ff:a2:
24:3a:55:8b:9b:13:9a:3d:c6:ee:00:85:cc:98:3e:
36:f8:b4:2b:a5:6f:a1:74:f3:50:06:8a:e5:df:95:
4d:5e:06:c6:b2:66:b4:6f:74:5f:bf:40:94:4d:5a:
39:34:00:75:df:01:3c:42:2a:4d:ab:94:cf:ef:ce:
34:55:ba:75:b8:04:20:73:ae:91:81:07:90:0a:b8:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:2F:61:AD:91:54:8A:E3:B1:08:F2:56:85:D7:6B:7A:3C:49:19
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:33:de:ef:5b:25:46:d3:0c:23:09:48:87:3a:0a:45:e6:1b:
f3:8e:30:ab:6b:f2:a1:68:23:e4:fc:d1:20:b9:b1:b8:03:f2:
ae:d0:09:4d:91:e7:d8:d7:79:e4:df:8f:f4:4e:4e:61:0b:d8:
8b:a8:41:23:d6:8f:e5:45:91:a2:f9:00:55:5b:2e:62:ca:ab:
ce:8c:62:e9:1a:d9:b5:6b:e6:01:6e:c9:cc:db:be:9c:2d:49:
2b:97:28:a8:dd:d1:b9:15:8a:1d:e9:b7:64:d4:40:6f:75:eb:
5f:83:d2:48:c4:8a:e9:ee:20:60:d4:de:5f:35:bf:b3:1e:43:
48:d3:03:a7:4b:22:4c:c9:5d:c6:62:cf:e9:95:82:cc:c5:6c:
3e:f0:99:ee:d3:07:2c:6d:28:6f:03:2a:77:2b:d3:84:23:18:
59:70:5f:16:82:65:7c:20:b0:a8:25:98:c6:f8:1e:ed:74:aa:
df:f8:67:84:77:b7:1f:d5:33:44:c2:c0:47:40:51:b1:38:f0:
20:b0:8c:4d:8b:2d:5b:cb:01:47:7e:bd:42:7b:6b:28:b1:4f:
0e:4c:86:8e:42:43:9b:2d:03:10:ea:96:b2:42:e1:ae:01:20:
3a:45:fd:32:f9:cc:db:a1:a5:78:40:da:b4:f9:4d:3e:b4:d8:
ea:a8:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:06:06 2025 by rpki-client