Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: NK+hct2OAZx/eq4laUlmG5Y3jbNnmjsAEwwzhGH6EEI=
Subject key identifier: 68:E1:38:90:B4:1B:49:0A:F3:19:12:90:A6:41:F4:2A:B3:D7:6C:CE
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 019A725C7B26A6CAFEE2FA9B0D02DC464EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: LjpxfFBFomonYnq+fqjf7YZ7nFJAfAQtVeEq+rxBx4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7b:26:a6:ca:fe:e2:fa:9b:0d:02:dc:46:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=68e13890b41b490af3191290a641f42ab3d76cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:7e:db:40:74:ae:8e:bf:c2:6e:6e:9e:15:
c0:90:b4:0f:71:08:b0:b8:ed:f8:b0:60:f6:62:62:
56:20:5f:d6:50:cd:b0:df:4e:67:9a:5a:de:cf:48:
89:fa:24:ff:b3:85:c5:c3:a2:72:b5:f2:9a:e7:66:
41:95:51:39:99:cb:ae:92:29:c5:2f:8e:0b:8f:65:
ae:c8:f4:5d:d7:9a:fc:cf:bf:e5:0c:a1:d6:d2:6a:
5b:75:6e:47:8a:11:2d:3a:3e:0f:f1:88:ac:8a:3f:
4d:10:c6:1d:27:12:60:42:2f:b0:b2:6d:b4:51:6e:
48:43:98:4f:09:8c:ea:69:6a:c2:2b:d1:50:04:1c:
c4:61:f2:7a:3b:23:15:c0:62:28:08:c4:e0:ae:54:
47:24:e8:db:33:1b:5c:9d:29:75:6d:1c:cc:c1:ee:
01:b3:0b:97:52:14:ea:a0:eb:6d:42:0c:c0:44:a0:
c6:8e:68:07:64:2f:b2:90:d7:a8:97:b6:41:f7:00:
5e:9c:d3:41:e9:57:ff:6f:15:0b:9f:1a:96:58:5a:
6d:cf:c0:19:6f:e8:92:47:85:fe:42:33:2c:8c:f5:
b2:92:dc:e9:ac:6a:b6:20:08:b6:2e:54:e9:ec:8a:
d2:89:51:ff:75:a9:f5:37:77:3b:df:e0:b2:42:2e:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:38:90:B4:1B:49:0A:F3:19:12:90:A6:41:F4:2A:B3:D7:6C:CE
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f4:63:02:55:60:34:a7:17:7e:1b:61:d6:0d:ba:df:2c:79:
39:b2:49:34:5d:68:65:8f:4b:c7:81:d4:dc:ea:77:7e:bf:bf:
4a:d2:03:2c:8d:e7:27:a6:af:6a:83:00:58:a4:b7:30:61:bd:
92:e8:00:69:67:2b:23:33:68:7a:1c:e9:50:88:3c:d3:66:5b:
83:1d:74:79:68:36:e5:02:90:e6:f1:e5:d3:8c:d4:d6:bd:32:
05:a1:55:50:92:80:bf:90:b6:49:03:38:a2:e1:59:80:6c:a0:
ab:bf:82:b1:f4:c5:06:6a:12:35:88:10:4b:59:b0:c2:77:0a:
aa:10:c6:db:b6:20:da:48:36:76:45:14:8d:28:9d:60:37:d0:
51:3e:fb:93:92:7b:cd:ef:98:ae:d1:94:1b:33:da:5c:bd:9a:
b2:9c:78:55:3e:10:7a:ba:9f:7c:17:27:5f:61:98:a7:2b:50:
e6:78:ff:d5:dd:86:63:92:a1:e2:30:f6:df:a9:ec:4d:32:5b:
51:29:d5:67:24:af:d1:c9:be:64:ed:68:63:bb:f5:90:79:fe:
ce:5c:9c:a3:0a:7f:ad:52:25:64:a0:98:02:16:db:20:91:cd:
bd:5c:87:c3:84:f4:7a:c2:55:ce:f8:9b:a2:5d:19:c5:61:fd:
ee:70:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:08 2025 by rpki-client