
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: O42vm2QYbefTEBYjZ7AB0JK4qf61zPEIDycSp0rSfNU=
Subject key identifier: D5:15:E3:CE:73:3B:90:71:6D:D5:88:CD:B4:82:8D:1A:A3:0E:EF:5D
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019873E390181648516084C5A5271EC742D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 095D
Signing time: Mon 04 Aug 2025 07:02:29 +0000
Manifest this update: Mon 04 Aug 2025 07:02:29 +0000
Manifest next update: Tue 05 Aug 2025 07:02:29 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: iCxhJrOf6Vj0W7GFent3x/cwdireoV3nOTVxBrWpYeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:90:18:16:48:51:60:84:c5:a5:27:1e:c7:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Aug 4 07:02:29 2025 GMT
Not After : Aug 5 07:02:29 2025 GMT
Subject: CN=d515e3ce733b90716dd588cdb4828d1aa30eef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:6b:a0:e0:5c:36:26:35:c7:8a:30:ff:82:
2a:2e:e0:0d:aa:4a:f9:b2:f1:3f:7c:7e:a5:bc:a3:
6d:a3:cc:0c:e6:d7:07:6b:e1:c4:ce:f3:33:f2:e7:
64:5b:d8:4a:b4:9b:04:c8:c0:a2:a1:00:bf:b6:de:
16:8f:e5:90:01:f5:90:89:9b:a1:0a:c6:72:20:d8:
95:92:07:0c:8f:cb:d1:0b:d3:52:93:d7:b6:0d:2a:
37:d7:f4:a2:74:29:35:ef:23:12:66:04:3b:f3:f7:
2f:21:5e:8f:fa:cd:29:77:f5:a5:3e:d8:7d:96:47:
5f:a6:41:66:dc:f9:ca:9d:28:ce:18:78:7d:57:0a:
6d:b1:e3:b4:7f:63:cd:88:66:ff:3f:58:ec:cd:25:
f3:2b:dc:cc:5f:18:a7:77:93:a8:22:17:2a:e6:a6:
9f:84:a6:e2:38:2e:7d:f2:c9:55:1f:58:0e:90:91:
93:c0:35:2d:fb:8b:da:22:7d:65:26:e2:e9:ed:da:
75:03:30:75:98:76:51:09:9e:a4:00:63:54:3b:c4:
50:6a:fd:8e:d9:66:24:ef:ac:e7:03:68:06:59:7f:
7e:00:8e:b0:84:0e:aa:f9:82:a7:10:2e:2f:15:57:
1f:69:12:eb:14:17:e7:51:f7:c3:9a:57:d7:7c:09:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:E3:CE:73:3B:90:71:6D:D5:88:CD:B4:82:8D:1A:A3:0E:EF:5D
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:25:8d:38:8f:59:2f:05:8a:26:65:56:4d:d3:d1:0a:c1:
87:fb:8c:54:d4:d9:ae:7a:af:c6:d1:cf:53:bd:ae:86:23:8b:
18:0e:ec:d5:94:b0:4a:74:88:a9:9c:98:a6:a8:31:b1:9a:fb:
48:aa:ef:1f:f9:4a:30:02:65:be:5b:3d:b8:df:1a:1e:bb:11:
a6:ec:ca:f8:31:80:77:5a:ae:55:60:71:2f:71:c6:01:8b:1e:
09:a4:32:b3:4e:3d:01:0c:c7:da:82:c1:56:f7:ee:a2:3e:81:
42:ba:8a:f3:67:0b:c0:31:9d:ad:aa:1b:ea:d8:b8:e2:7a:94:
90:ab:b9:32:66:fa:7e:cc:80:cd:72:f1:ae:bb:c8:91:18:4e:
88:56:e8:fb:af:aa:d4:c6:b9:47:5c:65:62:fd:df:9b:db:34:
b6:c3:e8:f4:62:86:47:41:08:b6:b0:6c:44:53:2d:05:36:6b:
1e:6e:4e:45:70:da:5e:1d:49:ab:33:bc:c0:82:f8:e0:1b:f0:
23:32:6f:d0:61:f6:6f:5d:c9:4c:64:dc:d7:dd:be:4b:39:11:
32:bf:6e:00:f2:7f:d7:d4:61:5b:df:b6:56:49:7b:54:32:dd:
95:0f:75:31:bc:ea:eb:cf:d4:1d:3d:d0:32:9b:ac:b6:48:45:
d5:17:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:15 2025 by rpki-client