Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: 7Iqwp5YFhdpGS9JqtKnlZCbW8IBqnPT8nuywsk3yc+4=
Subject key identifier: 58:94:7B:8F:33:54:89:EC:75:03:F4:D7:C7:DF:64:5B:00:B0:F4:8A
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019A4D7472E23C4C8F8FE0F9728B48CD3839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 06:01:08 +0000
Manifest this update: Tue 04 Nov 2025 06:01:08 +0000
Manifest next update: Wed 05 Nov 2025 06:01:08 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: lubyv/kw0H7td5NebQCluJiNbzzk6POUP6UZndbuH8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:72:e2:3c:4c:8f:8f:e0:f9:72:8b:48:cd:38:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Nov 4 06:01:08 2025 GMT
Not After : Nov 5 06:01:08 2025 GMT
Subject: CN=58947b8f335489ec7503f4d7c7df645b00b0f48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:0e:64:fa:fd:9d:94:4f:d3:c3:50:56:f9:
2c:da:25:81:90:0e:44:c6:89:52:13:96:9d:5e:5f:
55:51:57:37:f2:ec:d7:d8:d6:03:ee:e0:b9:d5:52:
fb:9b:46:de:55:cb:99:26:45:77:97:f7:1f:14:66:
e6:3e:59:2f:8a:50:c0:52:b0:e5:22:99:f5:93:35:
bc:4f:0b:0b:32:e0:bf:ea:87:3b:23:53:2b:9b:44:
a0:56:af:06:d6:b1:1d:19:a7:fd:88:29:c6:7d:32:
47:fc:fb:2f:1f:7d:2f:b0:d8:71:7e:ed:44:93:eb:
44:fa:ec:3a:2e:ff:48:cf:35:69:c6:0f:86:0c:ab:
6f:36:83:ed:7e:b2:44:1b:c8:58:84:85:a0:02:c0:
94:54:27:99:ff:8d:cf:62:d3:2c:85:cc:6a:c9:e1:
fe:e2:da:d0:b9:87:96:58:89:40:8c:fc:49:1e:53:
60:c7:50:4a:b4:e0:3f:ac:6f:6c:24:0a:92:86:70:
5d:9b:b6:2d:d1:d7:be:d2:10:76:06:22:8b:21:b5:
2e:35:ee:d7:50:4a:73:91:7a:82:18:50:ac:d7:a4:
0f:81:40:80:8f:e4:ed:5b:9f:34:f8:65:2b:da:ec:
68:3c:b7:04:9e:f7:9e:3b:f5:fc:88:0b:37:12:70:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:7B:8F:33:54:89:EC:75:03:F4:D7:C7:DF:64:5B:00:B0:F4:8A
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:be:67:ac:a2:1f:d4:fe:f2:06:05:98:46:07:c7:b7:4f:
79:0e:25:23:c1:89:f0:a6:96:82:e1:e6:d9:b2:be:35:7f:87:
54:68:25:d9:24:06:01:bf:59:c4:56:be:94:4e:b3:29:66:95:
95:de:28:b1:5a:49:20:b5:01:a7:50:c5:c5:d2:fd:7a:8d:12:
75:02:18:4f:59:9a:00:ac:f6:20:4d:88:93:1c:62:a2:6c:64:
89:76:24:c9:66:fc:85:12:0e:63:60:d3:c4:cf:56:69:87:a2:
b2:5a:87:2e:a4:da:66:33:69:b6:ff:a9:e9:3e:df:ee:10:79:
c8:b2:b9:f6:8a:ec:18:50:1a:17:d8:0a:75:45:2d:40:7e:26:
eb:62:56:f3:ff:ea:ee:8f:e0:57:a1:20:27:60:ef:52:42:d8:
cb:46:22:5f:e1:94:c0:8e:47:0c:85:09:03:f7:33:b9:7b:cd:
21:08:61:01:2e:ec:5a:e1:b4:5a:86:33:07:f6:45:19:78:c6:
1c:c5:7f:31:f7:1d:f4:ce:36:da:83:bb:50:3d:0d:fb:16:55:
50:5d:a4:1b:3e:65:c0:37:8a:70:c9:1e:5e:20:2c:c8:db:9e:
34:47:3e:b8:0a:b4:9d:84:13:d9:c7:1a:ad:5c:47:78:ac:5c:
44:e2:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:32 2025 by rpki-client