Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
File: Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft (raw, json)
Hash identifier: afxmvgCLOBG1IK0Mt4+HJbbsggkM7GCgmJqm/lXntuM=
Subject key identifier: A8:7D:D4:A5:DE:BC:99:1D:0E:4F:B5:38:71:F1:A6:1E:0A:E0:CC:B2
Authority key identifier: 25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF
Certificate issuer: /CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
Certificate serial: 019A7112F98F83C1C4AADB2BB65000F25D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
Manifest number: 0D
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl (hash: P9F3ypjQs1/UuBXBbDSWzfQyHJGN5gzoFxdyiQoOcfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f9:8f:83:c1:c4:aa:db:2b:b6:50:00:f2:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=a87dd4a5debc991d0e4fb53871f1a61e0ae0ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:ff:46:5e:70:1c:62:ee:e6:79:62:07:0d:
17:b3:3c:9e:ce:cc:2a:ce:04:da:75:e9:f1:11:48:
0f:1c:98:c1:33:b8:23:19:b9:fb:a4:33:39:7e:3e:
74:41:83:a0:e1:34:3e:59:f2:9b:21:b4:9b:09:93:
88:3a:cf:40:6c:5b:22:97:61:3a:f3:73:b0:24:fe:
0e:f3:1d:f8:9e:35:27:ab:8a:1b:29:9b:ec:d2:ac:
27:3b:9c:e4:87:14:f7:18:09:44:f6:df:fc:d1:7e:
17:cc:15:78:67:15:8e:ac:b2:a3:05:75:8a:5f:26:
86:49:42:9d:59:5d:df:9f:9a:53:ce:22:81:e3:ce:
3c:5d:bc:13:50:72:1f:ea:51:7d:7b:5a:59:72:63:
c8:02:2b:4a:2a:36:7d:f0:b7:1f:fe:33:bc:b5:56:
f4:42:b1:3e:cb:b9:04:67:2a:8e:56:10:d2:56:e8:
f4:76:01:6a:7f:a5:42:e9:75:0c:bc:07:67:be:33:
af:81:18:49:e0:3b:e6:24:ff:f2:47:fd:59:6d:1f:
3d:64:e1:2e:2e:6d:01:1e:a2:ea:66:b4:ed:5d:87:
73:48:ad:30:a3:23:d7:32:f2:bb:02:a5:88:5a:7f:
e8:5b:11:f1:b3:0a:da:6a:35:78:75:d1:dc:60:37:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:D4:A5:DE:BC:99:1D:0E:4F:B5:38:71:F1:A6:1E:0A:E0:CC:B2
X509v3 Authority Key Identifier:
keyid:25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6e:6a:e7:90:76:45:a3:81:cd:7e:96:06:7d:6c:1c:f0:56:
af:0b:e0:90:df:6b:60:37:61:f4:f1:c5:e0:70:dc:eb:aa:59:
ad:0c:bc:c4:65:c2:e9:49:67:7a:76:84:da:8a:1e:52:b4:79:
0b:c4:19:fc:0e:d3:45:0b:6f:bf:70:8e:00:ea:84:b1:ba:63:
cd:a6:0d:76:a1:0f:9f:51:db:c8:2a:9e:1d:ad:71:f5:b9:c5:
ea:1a:48:4e:d2:9e:a6:08:b7:ba:fe:31:e4:03:a1:ba:73:77:
bb:71:de:50:37:87:df:20:ed:a7:a5:55:0e:ec:2b:82:33:06:
4f:ee:38:a8:ab:4b:19:06:5c:3b:0f:96:d6:19:5f:aa:6e:a6:
a1:ff:33:89:72:18:b3:2a:5d:ed:75:26:77:de:1e:33:1a:45:
a0:ba:f4:63:8d:bb:97:d4:cf:72:96:74:3c:43:cb:0a:fb:a5:
dc:38:8c:f2:c8:ba:14:80:23:4c:c4:eb:14:ea:40:9c:c5:0b:
16:12:c2:b8:27:07:12:6f:78:0a:a2:f9:44:04:0e:93:1c:5a:
33:d2:52:ed:f2:f2:4f:f3:02:1a:a2:7a:c9:a0:22:68:1c:3e:
6e:4a:b5:e0:99:76:3d:09:29:c2:d3:8b:3d:14:dc:4b:7d:9b:
40:92:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:28 2025 by rpki-client