Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: 8PMIbUwbEqMvWpEOpKql4SzFKlEo1lNDDAUncOMd5GM=
Subject key identifier: 53:93:28:77:19:E1:C8:A7:7B:17:3C:E1:C9:DA:AC:6F:66:3F:C5:C1
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019A4DE1C968B543FFE5AA0B143A89B6E409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 124E
Signing time: Tue 04 Nov 2025 08:00:33 +0000
Manifest this update: Tue 04 Nov 2025 08:00:33 +0000
Manifest next update: Wed 05 Nov 2025 08:00:33 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: 5mko2IPOP6byESgOAEkppRDLUviITTP9DothwaHWVVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c9:68:b5:43:ff:e5:aa:0b:14:3a:89:b6:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Nov 4 08:00:33 2025 GMT
Not After : Nov 5 08:00:33 2025 GMT
Subject: CN=5393287719e1c8a77b173ce1c9daac6f663fc5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:2d:0b:ad:a0:1e:b6:03:7f:fe:1d:fe:1e:
fe:fa:00:e6:0a:96:b6:7a:29:8e:d5:bf:a7:eb:16:
36:43:73:35:93:d0:9e:d1:63:ac:93:7f:f6:1a:57:
3c:48:39:d4:1b:54:11:0e:29:4e:33:f5:58:5f:14:
37:3f:b2:06:2b:cf:73:35:d2:0e:95:2c:d7:d7:66:
ec:55:e7:6e:da:f4:19:77:f8:ae:31:af:48:80:b8:
85:a7:6e:18:09:d1:d6:a8:68:74:94:36:4a:b6:c8:
74:1c:61:ea:ea:c4:f1:b0:74:07:09:cd:50:0a:79:
1a:cd:25:e2:f6:0c:a0:be:9c:84:55:50:36:c4:9f:
3b:70:20:e4:bd:a3:2c:a1:71:d8:22:0a:28:5b:1d:
e1:a9:09:f9:dd:7e:12:93:8e:a3:2f:bf:60:85:44:
35:d1:59:5d:38:e9:6b:78:9e:d7:0f:13:a0:be:8b:
53:63:2d:8c:92:03:95:bf:6f:ba:ef:8c:28:ad:59:
70:fa:a3:f3:72:77:fb:55:0c:04:53:95:39:0c:95:
2e:32:3c:b4:5c:21:92:00:01:84:7f:f1:6b:62:cb:
c2:71:10:d7:cb:3e:e9:2c:39:20:f5:a5:8c:a5:fb:
9f:89:c8:93:8c:d7:9a:4a:20:45:9a:2f:7a:4e:ff:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:28:77:19:E1:C8:A7:7B:17:3C:E1:C9:DA:AC:6F:66:3F:C5:C1
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:21:8b:2c:6c:1b:78:37:26:65:6e:b8:e4:a3:13:d7:95:1f:
26:b4:6e:38:5c:70:d4:5d:ab:69:ed:14:e5:b9:15:1e:79:f0:
74:64:68:fa:65:34:49:e8:c3:8f:68:2b:b1:3a:35:39:4e:e1:
3a:db:7b:53:fb:5b:c2:0d:d4:23:c6:4b:29:5e:2e:db:90:06:
c7:01:71:6b:9a:97:5b:92:62:21:1e:3b:0b:88:01:c2:c8:ca:
69:3d:80:15:03:17:20:9f:cb:b2:bf:3e:d5:86:8e:43:7b:2c:
0d:51:de:f6:64:e6:e0:38:e0:ea:4a:24:04:55:ad:4f:76:c2:
90:b7:f6:23:97:70:3a:35:30:21:b0:38:46:26:8b:4a:f9:a6:
b6:96:f6:79:0e:d8:62:0c:9e:94:40:c8:68:41:eb:74:42:4d:
58:fd:cf:81:82:d5:2e:34:d7:70:06:61:41:85:81:70:e6:8e:
f4:f1:cd:20:4b:b6:57:70:ac:25:fe:af:f9:3b:16:bf:2d:87:
d2:31:b2:73:f2:43:f6:59:be:71:69:ed:ad:8b:cd:4c:a8:be:
1b:33:e1:58:17:00:65:4b:45:36:5f:ed:90:c8:cb:6c:dd:90:
c4:15:c5:99:46:dc:72:91:82:26:89:31:2e:a0:1a:8a:6c:5b:
f2:a3:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:36 2025 by rpki-client