Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: y+Ho9LE1JKba562DR8oC4DRiorRGxYvN+r5YherX0EQ=
Subject key identifier: 1C:04:2B:41:3F:3B:29:B5:49:D0:91:CE:83:35:1B:36:C3:5C:DE:6A
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 019A54C0C0CEEB73024CD67185D872F90383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 0A56
Signing time: Wed 05 Nov 2025 16:01:49 +0000
Manifest this update: Wed 05 Nov 2025 16:01:49 +0000
Manifest next update: Thu 06 Nov 2025 16:01:49 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: dooYOLt1j1MLXw2Xo1geMe/z52pwi4A+d27eFAnWG0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:c0:ce:eb:73:02:4c:d6:71:85:d8:72:f9:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Nov 5 16:01:49 2025 GMT
Not After : Nov 6 16:01:49 2025 GMT
Subject: CN=1c042b413f3b29b549d091ce83351b36c35cde6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:60:e9:52:87:2f:47:e5:88:81:82:60:7c:
4d:f3:52:2f:bf:a6:14:7b:e3:ec:75:99:b6:6c:de:
a7:a8:5f:e4:2c:ff:65:f2:5f:8e:e1:b5:cf:c0:29:
09:08:2a:01:94:d0:85:6f:f7:5c:4d:92:8a:9f:0a:
4f:6d:43:96:a4:84:42:34:93:19:ee:9e:2f:f7:04:
e5:d0:f6:3a:18:4a:ba:5b:e0:2b:af:c1:48:82:57:
cc:59:b3:69:12:94:c9:cf:d2:86:f5:f0:28:57:75:
30:9d:bc:c2:19:66:f3:40:6d:c1:54:87:48:c3:b9:
c8:be:6c:75:be:64:fd:33:8b:a6:e0:c2:13:3b:cd:
b7:d8:08:6d:00:2c:16:72:7e:04:a1:74:28:93:72:
04:40:37:23:5a:be:30:75:e2:15:69:5e:74:72:21:
2d:c9:a2:1c:3d:52:7a:11:7d:4f:81:a0:35:8d:c3:
f5:48:0c:9b:b0:00:94:4f:db:29:c3:1f:3c:02:c8:
30:31:4d:a0:74:60:41:a4:46:49:82:08:8c:f6:07:
9c:f3:d8:8c:71:c6:e1:63:3b:42:be:d9:e1:45:55:
10:33:a5:69:f2:c5:25:79:8a:ba:3c:1f:9a:c6:2d:
c9:75:df:1f:4d:46:86:bd:0a:10:22:52:02:68:05:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:2B:41:3F:3B:29:B5:49:D0:91:CE:83:35:1B:36:C3:5C:DE:6A
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:b5:0f:a1:43:8e:ba:ef:01:b1:1e:0f:86:2c:af:85:1d:
8b:05:ec:93:d3:2b:39:d3:f7:dc:e2:f2:6c:6b:af:56:18:00:
a1:56:5f:4a:4d:cd:8b:11:69:4b:a6:92:70:34:a5:8f:30:6f:
09:7b:71:a7:1e:1f:6c:be:d9:4b:1d:5d:53:fd:b1:cd:8d:ab:
c7:4a:39:3a:c5:37:ea:b2:5b:cc:c6:af:70:c6:69:31:e0:18:
91:b3:b1:3a:b0:55:c5:98:ff:9c:ad:b9:ff:d5:60:ee:12:8e:
5e:e6:d3:3e:16:9f:6c:b7:5f:be:84:b9:6a:1d:e9:3f:9a:bc:
c5:49:94:6d:d5:59:6a:39:60:5f:a5:9c:2c:16:5b:63:a6:dd:
67:4e:d2:f6:69:41:a8:4b:52:72:84:df:2f:2d:83:e5:8c:d5:
82:3f:06:68:b9:d5:12:f2:f6:3f:ef:df:be:89:8f:d9:76:1f:
e5:7a:2b:0f:78:a5:cc:e3:84:12:46:1f:49:27:71:45:cf:91:
70:fc:af:17:ca:a9:c5:d8:08:90:df:fe:8a:ad:93:be:89:0e:
a3:87:47:3a:ad:e9:cc:14:3a:87:24:dd:b9:76:79:0a:12:61:
c7:00:49:05:f8:79:35:72:b2:38:57:0f:50:3a:b6:f8:02:e3:
e3:23:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:09 2025 by rpki-client