Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: ZULk9DFExyRai+es1QZu37+FSD2iG1wA49Qrayb5l2M=
Subject key identifier: FD:DC:3C:FE:EB:51:DD:E7:83:C1:80:4E:E0:2F:F2:20:F1:00:77:0C
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019A4F626E66FFFDA94BAE8F1B7E9D397591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: DJniy5rGAckSu5gAOo6km7gqzet0i2pNqGNjG5wr+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6e:66:ff:fd:a9:4b:ae:8f:1b:7e:9d:39:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=fddc3cfeeb51dde783c1804ee02ff220f100770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:2f:cc:e7:5a:04:c9:2b:d6:8e:bc:54:40:
30:5e:c6:48:e4:3f:26:61:e3:16:50:a4:01:82:ae:
4a:06:d3:05:20:d4:99:44:5c:4e:1c:b5:7f:78:74:
67:e3:eb:6c:e4:f1:54:cc:a7:21:c8:43:f9:77:da:
ee:55:89:34:78:e4:fb:2c:00:59:35:fb:32:59:69:
95:4e:40:8f:4c:86:25:c0:8a:89:86:58:b4:95:63:
71:36:f7:b7:5c:e3:a7:23:2a:13:4f:aa:1e:3c:f1:
d2:37:55:63:80:f0:11:b1:c4:77:ea:c4:c5:8b:fb:
d6:05:6c:8c:34:08:0e:d0:2d:f1:65:4f:b9:96:52:
05:f7:60:35:dd:7f:46:c2:a0:9a:e9:37:dd:7f:27:
79:cc:a6:f6:47:84:23:a5:4e:53:f7:ca:a6:0b:3b:
b4:9a:3e:b7:9e:f8:86:e1:e1:7e:fc:b3:67:fd:1f:
2a:68:a5:00:ab:5f:63:f5:3b:f5:ae:e9:99:43:7a:
24:e0:94:6a:9d:d2:49:72:39:80:cf:36:dd:b7:86:
3e:e9:1c:b8:07:2a:43:36:4e:0e:98:43:8f:f1:6c:
6a:19:be:59:3f:ff:cc:c0:7e:bd:cb:6c:75:9a:b4:
0f:0a:bf:17:d5:71:9f:61:b8:f8:ed:a7:eb:bf:fe:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DC:3C:FE:EB:51:DD:E7:83:C1:80:4E:E0:2F:F2:20:F1:00:77:0C
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:3e:bd:b1:3e:a7:5d:fb:73:86:51:8e:b6:72:c0:6d:e4:
6a:0c:18:a2:c0:e6:f0:75:f3:ac:a5:8a:47:91:b5:07:8e:e3:
ac:56:0b:2b:43:ef:f4:a3:0a:ee:00:a8:7e:d7:e3:71:96:be:
91:42:dc:2f:24:56:3a:65:e0:69:44:f8:05:93:ab:ea:5d:3c:
4d:53:80:e8:a4:fd:ad:2a:37:c4:6b:83:6e:1d:1b:46:b9:50:
87:5f:7d:08:2c:3a:a6:a8:e9:cd:f5:cd:58:35:16:ca:46:16:
af:14:6c:6e:55:5b:ea:38:6c:c1:f0:58:0d:86:d1:f0:63:a0:
a4:2d:4b:ae:d7:33:7a:6f:07:fe:80:1f:c5:88:40:fa:61:ba:
c4:55:1f:51:56:fb:32:b8:e5:3a:7a:0e:e8:f7:18:e6:82:58:
1e:d8:a1:80:c1:da:81:b8:a5:0d:c6:94:0e:af:1a:bd:c5:d4:
6e:e9:ce:d7:12:ff:1c:23:69:28:2e:35:51:42:ea:91:5b:50:
a2:40:34:e4:4a:d1:ef:e2:03:3f:c9:e6:6f:fd:57:ba:7f:1f:
c8:17:20:a0:e9:ad:5b:90:31:d5:23:6e:7e:8d:a7:63:4c:ea:
6b:b7:2e:18:f6:c9:00:d3:e8:d9:7d:79:86:13:a7:59:4a:08:
2a:6d:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:57 2025 by rpki-client