Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: gcY+y33OcgDWhktooKov/a+YINzGvPgKOM6ax8iF96M=
Subject key identifier: 28:E1:65:20:B2:30:5B:06:6E:6B:97:96:86:6C:FB:46:AC:D9:3E:C6
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 019A71B848B936C91B3C0A50DB9FF4E6FDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0EF3
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: mCN2uMNl5rLinWmOyYmIN1L97TgToPkeB/GzOdUATmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:48:b9:36:c9:1b:3c:0a:50:db:9f:f4:e6:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=28e16520b2305b066e6b9796866cfb46acd93ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:3a:f9:06:53:45:ca:21:63:41:bc:c9:ea:
49:2d:00:e3:dd:44:19:ea:36:dc:81:08:6a:db:9a:
d4:db:41:c5:78:e1:4c:4e:77:1e:3e:0d:46:b8:d9:
af:4b:e0:bb:0c:5d:a1:c3:4b:f7:fa:47:a1:a1:55:
3f:8e:cc:0c:d6:b9:c6:b1:58:c2:a4:56:c7:27:20:
f4:fe:b8:82:3f:79:d4:72:77:9c:2f:19:5c:37:34:
59:40:4b:4a:b9:a0:d9:dc:af:01:3c:4a:fb:b3:be:
cd:13:2d:6f:9e:7e:ae:ff:f4:ca:0b:10:3b:cc:f7:
dd:3d:4c:d3:a0:18:5a:df:36:35:83:11:a9:5d:70:
c6:d3:c0:d5:16:d0:fb:f5:82:2f:1e:76:e4:f8:bd:
b6:43:f0:ea:62:0b:92:9d:a0:ab:f8:40:32:be:2a:
72:56:9c:02:d1:ba:00:c6:30:d6:72:0f:01:89:16:
e1:01:66:2b:83:86:1b:30:08:7d:5c:d7:67:46:7d:
8f:24:ff:fe:54:ff:56:ff:39:97:04:b5:8f:a4:68:
0c:9a:66:d2:da:00:41:f9:08:b8:3d:b8:ce:08:bf:
f3:09:af:90:ad:9b:76:8d:42:dd:92:54:4b:aa:9a:
2b:c3:95:7d:dd:30:26:bc:2c:3d:04:59:4f:e1:b5:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:65:20:B2:30:5B:06:6E:6B:97:96:86:6C:FB:46:AC:D9:3E:C6
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f1:09:cf:2c:3b:f3:e3:d9:e2:1f:54:a0:9c:95:c9:4e:34:
f4:0e:8e:a2:eb:76:38:d0:de:d2:c2:39:7a:f0:7c:c5:ae:a6:
39:b7:a2:81:bd:ad:9b:95:b0:ab:71:61:43:bf:eb:b9:9c:70:
e3:71:67:75:06:f4:8d:6c:9b:ed:c1:b7:fe:34:08:b8:56:8b:
d2:59:e1:ff:f6:41:d3:96:66:06:33:52:7c:dd:c8:d8:fc:15:
6c:32:90:31:99:37:3c:86:33:4c:d9:74:f2:12:64:2d:6a:cd:
a0:c0:36:e7:0d:ea:b5:97:33:f3:70:b9:96:98:79:3d:5d:9d:
2f:29:1f:91:71:96:4f:58:ac:d4:ff:62:05:03:aa:be:c0:29:
f7:b5:6c:ca:cc:38:15:c3:e4:1d:2a:58:56:41:27:3c:17:00:
4d:ac:93:4e:8b:89:48:09:9f:d5:c7:fc:bb:4a:99:f2:9d:c4:
7a:40:b2:ce:98:94:db:4c:c8:5f:48:a0:42:32:8e:07:d6:b8:
de:01:d9:bb:45:18:64:ce:89:08:bf:72:a8:d5:a5:cc:f6:96:
ba:ca:97:e5:81:f8:24:e6:4b:cf:45:7c:2a:e1:2d:b1:67:3e:
c0:21:19:fe:5b:28:16:cf:f7:f3:92:d7:a1:01:83:ee:bf:62:
78:86:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:39 2025 by rpki-client