Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: ZJlRz5hK/ahA9bF/w/nn9MoZVaG9rcipZ+N8HLF70c4=
Subject key identifier: D5:C9:7F:04:A0:B2:9A:AB:4C:5A:F2:44:6B:A4:90:76:BD:65:F9:CC
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 0199221F3C22CF4BD97D16FD8800CEF8B1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:36 +0000
Manifest this update: Sun 07 Sep 2025 03:01:36 +0000
Manifest next update: Mon 08 Sep 2025 03:01:36 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: 7cMiNw8Jrc3iku7tY9+wGlg5CruKnxgdBZV97gNccF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:3c:22:cf:4b:d9:7d:16:fd:88:00:ce:f8:b1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Sep 7 03:01:36 2025 GMT
Not After : Sep 8 03:01:36 2025 GMT
Subject: CN=d5c97f04a0b29aab4c5af2446ba49076bd65f9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:bb:1d:e5:21:36:bb:b4:a3:f8:b5:af:89:
b7:0f:44:e6:8c:66:e5:31:37:fa:1e:39:96:44:56:
1b:db:cc:d8:9a:27:82:17:96:a6:52:fb:a3:72:b6:
12:77:4e:a6:70:37:a3:b2:f3:99:26:1a:dd:d5:30:
30:b8:67:76:04:39:54:63:08:55:12:de:74:2c:74:
95:4f:2c:cb:cf:fd:14:7c:c0:8b:d8:43:de:69:8e:
94:6a:f1:e8:98:62:af:b7:de:5f:d1:4c:20:c2:db:
f9:92:fc:1b:05:17:83:ee:d5:f6:cb:8b:d9:62:56:
b9:0a:dc:9d:ff:6d:0f:c7:f9:5e:3f:3a:5a:82:ab:
88:cb:30:b5:09:47:5a:05:d3:92:fb:5f:35:2b:b9:
b8:cb:e3:9f:db:07:91:bc:35:f3:12:52:45:b8:06:
cf:ad:68:61:89:62:6d:37:69:48:55:0a:11:d3:c4:
0f:b7:f1:88:f7:92:64:8f:5c:b5:27:51:80:ea:36:
da:b3:e5:5d:ad:63:19:d1:69:a8:9e:72:23:0b:09:
19:16:10:d7:a1:50:6c:3a:6c:cd:cb:6f:fe:ed:50:
48:11:e7:93:e8:cf:85:65:a3:67:9e:77:ec:07:96:
31:09:c9:dc:57:a7:fb:1b:72:fc:9f:7b:78:46:b2:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:7F:04:A0:B2:9A:AB:4C:5A:F2:44:6B:A4:90:76:BD:65:F9:CC
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ec:ab:ca:15:8c:8d:77:7b:cd:80:83:d8:37:33:fd:4f:bc:
f6:41:d3:4f:3e:8f:c5:2a:5c:92:ff:76:a9:6f:e4:b5:c3:c6:
d1:e7:a5:ed:fb:8e:20:da:78:0d:83:72:a7:ef:51:20:70:72:
47:f3:dc:6e:7c:84:6e:63:21:68:0b:89:7e:70:ee:9d:28:ce:
bf:a4:f2:63:99:18:d6:50:d3:9c:77:d0:d6:8e:70:45:02:aa:
1b:9c:c1:e0:88:15:b5:14:d5:74:ec:c5:c4:fc:c7:54:0b:0c:
f7:5a:3f:25:47:f2:c0:7e:ac:be:bb:42:5a:51:9f:b8:3e:5b:
90:cf:5a:ec:c7:3d:af:da:60:b0:7c:38:c7:ed:91:f0:01:a6:
b0:ee:89:92:60:28:bd:8a:a9:1f:8e:69:7b:d7:57:18:3b:05:
c5:7d:ec:6a:f9:e9:3c:37:cb:68:97:ea:e1:c9:1e:a6:f9:b6:
1c:4e:1b:cf:83:ab:43:45:6c:cb:4c:2a:21:03:67:7d:d1:22:
6f:dd:37:99:ff:35:33:91:99:52:14:49:7d:66:48:21:df:ad:
a3:34:bc:f6:9d:e5:3c:01:c9:13:ab:3e:02:c6:8f:8d:99:a9:
8d:df:70:54:16:5f:cf:b3:e5:83:b2:b0:e5:08:52:40:bc:30:
da:41:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:03 2025 by rpki-client