Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: dpYtq6NeS3AZ36K6l6V/iML6VPlagmcc2/YwSkDdz9c=
Subject key identifier: 85:0B:9A:10:1C:D0:E1:C5:05:FE:74:A9:67:18:7C:57:65:1D:03:0E
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019A51BE517044E8453C467AC3CC5AD5620F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 153A
Signing time: Wed 05 Nov 2025 02:00:18 +0000
Manifest this update: Wed 05 Nov 2025 02:00:18 +0000
Manifest next update: Thu 06 Nov 2025 02:00:18 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: /smPW3ynJxpZxJ51wScFfnLfH58Lb+nsK/v+4iwVkGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:51:70:44:e8:45:3c:46:7a:c3:cc:5a:d5:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Nov 5 02:00:18 2025 GMT
Not After : Nov 6 02:00:18 2025 GMT
Subject: CN=850b9a101cd0e1c505fe74a967187c57651d030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:16:88:1a:da:1c:d8:ea:4f:9a:44:07:8e:
0d:71:88:50:5e:ac:33:2c:ee:9d:a7:13:fc:1d:71:
71:10:16:4c:4c:95:1f:ab:88:ed:1f:6e:01:8d:eb:
3a:c4:12:a2:36:09:71:01:b3:91:97:c5:4e:44:d7:
89:5f:e1:26:cb:95:d0:5d:de:9b:00:a6:c3:64:29:
b7:21:55:12:b3:43:f2:fa:cb:51:4d:7d:5d:e4:e5:
36:35:42:bf:cd:81:d1:b0:9d:9e:7e:c9:8d:d4:08:
37:a0:50:21:f7:cc:f7:90:0e:c3:c8:5a:45:0b:a9:
41:1f:3d:41:35:bb:3a:71:a2:e7:7c:45:c1:01:6a:
96:b2:2b:9f:ee:46:09:42:81:da:f0:9b:5d:c0:de:
6c:03:c9:03:79:52:9c:cc:04:44:1d:1c:4f:43:b0:
2d:d1:af:fc:82:08:36:74:39:23:c8:bc:ec:4e:3e:
87:09:ce:0d:ca:9f:35:d3:03:03:1f:78:3e:bd:01:
90:01:d3:52:24:a9:1d:b5:b5:74:13:b3:06:74:6d:
1d:f5:e9:e4:e5:4f:ef:71:d9:f3:df:a5:a5:e2:fe:
e7:67:e4:2f:f5:6b:d8:f4:70:ad:3a:76:e4:88:e4:
e4:ac:7e:9a:66:98:d9:b3:c1:94:1c:4b:50:a3:25:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:9A:10:1C:D0:E1:C5:05:FE:74:A9:67:18:7C:57:65:1D:03:0E
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:72:3d:d4:e1:33:27:37:2c:c1:f7:bc:16:40:00:9f:bd:
28:69:28:fd:a8:22:d0:67:00:3e:39:5c:62:3a:28:82:fc:fa:
7c:53:65:39:d9:bb:8d:2b:51:52:35:cf:a1:af:b0:dd:bd:99:
fc:66:e0:06:5a:f5:fa:ed:66:47:ca:f8:46:f8:a3:ef:55:23:
46:6a:d0:12:52:0b:0e:37:46:07:4a:6c:c0:28:76:e2:5e:11:
59:a0:ab:a9:34:11:99:20:59:32:fa:a9:de:05:bc:26:b7:52:
42:49:6c:ec:ce:1a:18:07:c0:16:e5:4f:3b:ef:b8:be:57:b2:
27:5a:2b:4e:ce:e0:32:7f:fe:50:a3:f7:f1:5d:d5:91:24:5d:
38:1e:aa:e7:6f:9c:1d:c2:49:04:93:3c:ad:87:63:e5:19:25:
28:16:99:df:4e:37:c6:39:33:9a:27:a3:8b:e9:34:fc:fa:95:
52:01:f2:76:db:b7:8d:19:c0:67:0f:eb:1f:b2:0f:87:5a:a8:
99:96:7c:21:4b:6f:7c:ab:aa:58:51:1d:3e:41:26:d1:09:2a:
8e:56:2e:ad:63:c0:e5:c7:65:ec:7c:ed:f2:41:4c:57:34:01:
6f:55:af:c4:2e:9a:bc:90:b7:37:a5:28:80:30:0c:be:f5:dd:
c9:3b:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:21 2025 by rpki-client