Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: Itt1qDDe+n0LbTR6PkUfm+CACAOlwytuwfzDWYzhkA0=
Subject key identifier: 78:14:B3:2E:09:D6:A2:52:F4:6E:72:76:29:0D:4D:A7:93:8C:44:58
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019A4F995C78BD3F26F40BF65B5162DADF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:41 +0000
Manifest this update: Tue 04 Nov 2025 16:00:41 +0000
Manifest next update: Wed 05 Nov 2025 16:00:41 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: RDF5u9gXnam8VqUU9DTVIhVAZeFZyKbKQQnnuO8VchQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5c:78:bd:3f:26:f4:0b:f6:5b:51:62:da:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Nov 4 16:00:41 2025 GMT
Not After : Nov 5 16:00:41 2025 GMT
Subject: CN=7814b32e09d6a252f46e7276290d4da7938c4458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:03:e3:03:0c:15:eb:cf:33:2b:da:bf:28:
8b:6d:7d:32:1d:f7:d7:00:09:f0:5f:d2:64:fc:24:
d8:ac:64:85:c7:e1:1c:e4:1b:da:85:a0:f8:bf:28:
45:f8:48:35:56:da:2a:6a:8e:70:04:d0:a1:40:91:
3b:f7:fa:a8:3d:d3:12:f3:28:f5:41:15:4a:53:a2:
e0:ec:f6:32:f7:c5:f0:b0:a1:d9:1e:55:92:93:14:
7a:2b:36:ae:39:09:b0:9a:31:03:35:56:e5:64:0d:
ab:b2:c4:6d:9a:8b:b7:24:b0:dd:e9:b1:68:a3:6e:
d0:a8:6c:6e:41:d4:1b:f9:dc:d1:5c:b7:a7:2f:9d:
a1:ec:f3:04:2a:bd:47:78:c5:82:b3:46:cc:80:73:
f5:d5:c3:39:f0:d8:b2:8c:5b:ba:c5:52:76:52:e7:
3d:29:ea:d2:a6:f8:9e:35:ee:eb:7f:2e:4d:4d:b2:
b1:13:08:87:c3:c9:c0:84:70:46:4f:ef:71:4d:21:
62:6f:6e:55:0e:b5:1d:da:79:1f:2c:8a:b5:6e:00:
f7:7c:06:0c:be:5d:28:56:b0:3b:a1:fd:6d:ee:f8:
56:ff:c6:06:87:b2:a9:d1:12:0d:ec:16:1d:dd:3c:
79:e0:24:7e:fc:7d:23:33:9e:58:48:35:e9:ff:9b:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:B3:2E:09:D6:A2:52:F4:6E:72:76:29:0D:4D:A7:93:8C:44:58
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:a7:3f:06:2a:a1:21:7f:19:72:75:b0:67:d6:6a:43:d6:
5f:30:68:69:36:a9:65:91:d7:e5:16:8b:61:e8:d5:87:89:e8:
90:e6:ea:79:f8:16:60:72:69:16:9c:3d:13:58:eb:84:20:0a:
69:ee:82:bd:45:3b:92:7c:67:7b:18:1d:fa:62:18:02:81:3f:
0d:ee:60:a8:69:f1:39:ac:c3:ec:4b:ff:09:e0:06:ba:18:b1:
28:8e:19:ed:d7:31:19:58:c8:48:49:c1:3c:17:9c:7e:45:5d:
b7:fa:63:77:8b:85:65:75:d2:67:60:b9:fa:c9:01:16:f5:cd:
22:f7:78:47:7a:c6:4f:e0:d4:90:9a:d4:e9:46:86:37:a6:3c:
84:a3:72:fc:ba:f9:6b:58:bb:9a:0f:69:f6:bc:9a:91:83:ed:
12:55:e5:fe:c1:00:e1:54:6b:fb:0d:69:73:6d:44:c2:ec:67:
29:5f:d5:54:e5:8c:73:55:ab:26:f2:df:92:b9:b5:da:70:64:
f0:8e:e5:57:24:be:b5:ac:c3:c7:54:70:b4:6a:7d:32:9a:4f:
c7:ee:87:5b:39:18:65:3e:d8:d2:3b:02:1b:e2:d5:ed:57:a2:
74:d5:8b:ac:fa:e6:5d:6a:6b:1d:f2:82:66:33:6e:24:63:fd:
fd:3e:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:01 2025 by rpki-client