Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: vXmhuFKAmLrocPe+3EtG2h8spdqujoUfdRuuhAexRro=
Subject key identifier: AE:81:33:D3:7B:40:D2:15:C3:55:E1:2F:3F:3F:94:84:C0:C6:FF:BD
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 019A71B951CE74217C9E2401D3CF29278702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: PCpxK0CMfw/nEEBjE3RHtca6GfNlBjg0/syIJF/WR5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:51:ce:74:21:7c:9e:24:01:d3:cf:29:27:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=ae8133d37b40d215c355e12f3f3f9484c0c6ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:00:c1:d9:93:59:c6:4a:78:c4:7a:d8:04:
52:23:0e:78:bc:4a:e3:fc:d5:50:f1:2e:61:0d:a4:
44:9e:8d:37:bc:fd:9e:f9:6a:6d:12:bf:ca:bf:2f:
ed:fa:e0:3f:2f:fe:c2:36:c7:d6:97:f5:c4:ad:61:
6a:85:99:05:4b:6d:39:c1:19:be:73:6c:d1:7f:8c:
94:80:ce:11:2e:c7:a4:c5:03:d2:35:8c:50:82:3f:
7a:20:91:db:3a:e0:da:dc:e9:38:25:78:6e:fc:a2:
74:50:73:c2:bb:06:fc:64:6c:1a:03:b4:28:7e:88:
50:e5:91:8c:d8:c5:02:50:75:66:58:8d:11:be:02:
ee:86:6d:59:41:9e:28:32:f8:99:75:ab:b7:30:f4:
2e:8b:dc:be:26:8e:4c:04:d8:ff:48:5d:52:84:fa:
49:2f:6d:e1:f1:25:d0:a7:65:de:33:3b:56:65:d7:
fe:b8:8a:e9:73:53:30:26:af:7e:f9:6c:f2:18:e3:
ee:3d:42:c2:66:16:57:2d:9f:84:5f:e0:d3:7c:1c:
52:f9:a7:bb:13:e1:8c:dc:0f:3a:8f:41:5a:ee:7e:
11:30:b3:e1:92:f1:bf:83:cc:da:2d:b4:ea:3c:f0:
6b:d9:fc:3a:53:9a:10:78:b1:9b:94:ab:1c:1b:70:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:33:D3:7B:40:D2:15:C3:55:E1:2F:3F:3F:94:84:C0:C6:FF:BD
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:2a:62:df:94:4e:87:cd:49:9f:02:7a:f9:7a:78:bf:dd:
c8:b1:82:17:73:e9:de:fa:90:32:d3:2c:3f:56:ef:e3:6f:8e:
c3:48:f1:8b:1e:a5:c1:e1:5c:22:8f:39:62:57:12:2d:f9:13:
c0:c8:7c:34:ac:76:53:55:c7:e5:eb:e0:0b:e3:84:37:f6:dd:
9c:3a:0f:43:9f:ba:4f:d5:91:ef:d0:eb:b8:2a:d2:77:5a:8e:
29:18:df:36:03:b1:bc:32:52:0b:e3:fd:2d:a6:bc:d5:f9:ae:
d2:15:a7:19:17:74:50:d1:18:00:d3:26:42:54:da:5c:e0:bc:
12:7b:a6:02:67:04:fa:d5:78:62:0f:1c:5d:09:96:f9:8d:06:
81:2a:9e:6f:e1:c5:b6:15:d4:56:35:e7:e1:31:ad:13:90:49:
db:00:18:4c:39:0a:fa:c9:ea:16:b1:a0:c7:f7:8b:a0:e8:19:
18:8a:3e:ac:38:1d:6c:7b:d4:a6:c1:0c:15:30:e1:7e:1e:d7:
63:28:24:cb:15:72:ab:b5:95:60:bd:e8:21:d5:35:e9:77:19:
32:06:69:ca:e0:7d:1a:a3:2b:98:01:71:66:eb:e7:26:e1:1e:
b8:c1:65:6a:78:8f:1e:bd:27:01:b0:7f:7d:10:8a:fc:b8:a4:
7f:7b:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:41 2025 by rpki-client