Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier: iQb7GJTqZdiTg5tG0W0vTlXYeupsn0WamlEyQe0C5uQ=
Subject key identifier: 97:0A:3D:6B:6F:E1:07:0F:8D:09:98:96:19:E0:3C:8B:0B:4F:4F:BC
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer: /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial: 019A711324CC374E0CC91ADEFFB7BBB9F4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number: 0A4B
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: tk9rLgaPwqs7kopqmcmLjqbxYm+u+lFee+ZXK2RnUqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:24:cc:37:4e:0c:c9:1a:de:ff:b7:bb:b9:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=970a3d6b6fe1070f8d09989619e03c8b0b4f4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:a1:78:5c:47:c0:a2:71:a8:96:59:50:9f:
42:4f:7e:e7:c1:2b:0f:55:95:e4:b5:eb:f3:60:87:
36:52:0c:be:ff:92:23:99:69:67:52:73:86:99:77:
bc:b9:40:0f:ff:78:cc:1c:10:6d:01:41:13:ec:b4:
c4:22:b1:8d:01:1a:3d:b4:91:90:4d:35:38:2a:3f:
d1:21:bf:eb:eb:1a:da:55:3a:01:7e:8a:3c:70:c6:
70:dd:7a:72:3e:d5:d2:bc:40:c6:fe:2a:cc:8b:5c:
d2:a4:6f:47:e2:06:62:ab:ab:4f:13:ed:b0:5a:45:
3d:ab:ea:a5:51:5b:db:14:25:fc:91:e2:51:ed:a7:
6f:4b:2e:61:0a:0f:62:30:eb:53:8c:1c:7d:0f:f9:
5e:10:79:fd:2b:fd:e2:4d:ad:c8:ea:91:a2:c7:d5:
37:da:f1:db:9d:4f:72:af:9f:f5:3b:3e:4b:5d:1f:
96:fb:72:d2:4a:38:47:a4:c3:b5:bf:e8:36:f2:cb:
dd:27:a9:dd:38:61:5e:c1:5b:5d:d5:66:83:ee:96:
fb:98:a1:6a:bc:19:4e:ee:59:3f:5b:4b:45:3b:2d:
61:0c:ce:8f:58:80:fe:35:b3:ad:ac:b8:51:dc:ed:
3f:5a:75:a2:fe:5f:cc:91:a6:c4:52:31:1d:1a:2d:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:3D:6B:6F:E1:07:0F:8D:09:98:96:19:E0:3C:8B:0B:4F:4F:BC
X509v3 Authority Key Identifier:
keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2c:cc:63:e3:0e:62:d0:88:bd:7a:6c:b1:02:8f:f9:37:3e:
bd:06:00:17:56:7f:df:12:47:e6:84:f4:57:ca:d3:45:9e:b5:
c1:c3:7b:8c:6b:cd:8d:af:01:8a:d2:e2:74:4d:96:f3:c1:f2:
d8:56:83:4b:13:d9:39:43:1e:21:80:51:35:09:19:fc:fb:ad:
61:2a:a5:79:45:2e:40:5b:63:53:fd:c5:9b:70:24:49:86:03:
cd:cf:ed:d1:6a:78:92:27:4f:02:73:67:fe:82:04:a1:80:5b:
e6:01:2f:03:4f:0c:b3:bb:d7:7e:29:3a:ff:f4:60:4d:fd:fc:
6e:77:0d:04:66:40:f1:60:94:6b:14:d8:51:ed:1c:13:19:f6:
23:1f:05:bd:7f:39:ab:dc:17:01:86:0a:5f:eb:05:ad:44:17:
d8:f6:23:36:83:fe:bd:3e:98:9c:ef:67:9b:af:0f:6c:12:37:
3e:43:e7:7a:04:69:68:d0:75:56:25:08:20:2c:0c:25:f7:3b:
d2:a4:ae:62:46:23:d6:ef:22:74:ab:90:47:34:1a:cf:29:1f:
a7:f8:60:12:bd:d2:87:16:14:07:5e:20:65:8c:78:f6:b9:ca:
b1:86:2e:62:40:d6:7d:64:19:dc:24:32:ab:0e:9b:31:7b:70:
04:75:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client