Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: mjvzFVd7DzzrXy5eJSCptlF7Sg7t/z3+iKt6I+VAxKw=
Subject key identifier: 89:88:75:D2:97:1A:03:43:AA:62:6F:60:0F:44:90:6F:D9:FB:79:73
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019A4EF4EA42B26A62BB88C2DBB5CF073883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: IpUjXG7ja5gjWfPCOsybvAPrdAfhoJJAhWoiezllnEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ea:42:b2:6a:62:bb:88:c2:db:b5:cf:07:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=898875d2971a0343aa626f600f44906fd9fb7973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:0f:df:f7:39:b7:46:5f:b7:d4:34:69:bd:
b6:cc:85:ed:93:08:e3:de:72:bc:f7:41:4d:b2:b5:
90:0b:2c:a9:c2:7a:1f:2e:39:38:c8:6c:98:45:d7:
37:e5:72:ab:00:83:a9:af:e0:59:3a:ac:41:c9:bb:
e2:6e:6e:f8:4f:f4:be:a5:bc:4c:1c:67:0e:db:b8:
ce:62:c7:c0:65:a9:e1:3a:a5:0b:c8:58:20:28:44:
90:03:d0:63:1d:f0:60:b0:82:4f:81:82:a4:d0:34:
6b:fe:b8:49:a7:a5:28:c4:f9:dd:08:a0:a1:b2:57:
bf:70:46:3d:8a:ba:2e:35:48:fe:58:95:f5:fa:c7:
0d:3e:26:80:62:f1:c4:8c:1c:fb:40:09:ba:8e:ac:
12:f5:43:19:be:13:24:d5:6a:5c:e7:07:03:8d:12:
41:67:db:46:b9:c1:7e:5c:b8:28:fe:17:6a:d1:4b:
7f:92:4a:f9:29:bd:b7:7f:29:5a:8a:71:0c:33:61:
41:16:6c:97:dc:6f:b1:b5:91:79:03:81:17:32:e4:
3e:af:1d:cc:04:37:98:8a:dc:e2:b5:1a:54:3c:45:
1c:97:5c:e3:b2:03:18:c2:8b:ed:55:f5:2e:df:c9:
b3:53:cd:bd:55:9e:0c:6f:59:85:e8:43:38:37:25:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:75:D2:97:1A:03:43:AA:62:6F:60:0F:44:90:6F:D9:FB:79:73
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:f9:05:76:73:72:60:b8:fb:ff:5f:e5:7c:3d:d6:aa:24:
6c:3b:67:47:1e:7b:b8:98:0f:36:a5:1d:e0:d2:b3:a4:5e:60:
95:ba:66:fe:dc:3c:9c:f6:0b:37:db:a9:3a:34:d2:c7:d4:f7:
ef:89:b5:df:55:c5:04:b8:a6:74:f8:cf:87:32:7a:ef:8c:4b:
65:f4:81:39:58:57:a6:b2:43:63:16:72:d0:c0:ee:ca:d2:69:
e6:74:c0:dc:3c:9f:a8:6c:8a:e6:5a:fb:e2:e5:af:2a:36:41:
75:9b:d0:47:d8:be:10:f4:88:23:c3:e8:8a:5a:9f:b2:68:22:
55:c9:9e:75:49:2d:ca:88:4f:47:6e:1b:32:91:82:68:44:0a:
64:08:43:b1:a6:18:0a:1e:47:25:d0:af:36:44:0e:56:2a:86:
6c:27:6c:6c:25:04:dd:e1:58:6c:14:38:d1:cb:46:96:64:9a:
4e:ec:a6:f0:d8:2c:f2:6c:ad:27:d1:5a:b6:91:6d:05:6d:f1:
a1:64:d7:d4:bd:3c:16:64:21:e6:bb:75:e4:2e:4f:72:dc:6e:
75:79:4a:42:28:e8:29:6e:d8:8d:52:df:10:33:7c:d6:2e:8a:
9c:e3:0b:9a:06:c5:2f:35:6c:43:59:0a:8f:57:fe:64:5d:dc:
3f:73:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:59 2025 by rpki-client