Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
File: j33ZCSspRN36oXbsIwf26Y9N44M.mft (raw, json)
Hash identifier: Tb4xFct9M1gsKOhNqZQtMa/ruAQEhPdm4toYDX4rcRw=
Subject key identifier: 15:13:6B:CD:6C:18:D4:2D:4B:19:D2:F3:99:96:8E:97:04:D4:8A:19
Authority key identifier: 8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83
Certificate issuer: /CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
Certificate serial: 019A7112A79E5CE9246B613E47D9C3A304F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
Manifest number: 8B
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: j33ZCSspRN36oXbsIwf26Y9N44M.crl (hash: rFEYNeyt92jXIWFeOpZXA3ykqNodT+0M8VQjPh8+iac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a7:9e:5c:e9:24:6b:61:3e:47:d9:c3:a3:04:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7dd9092b2944ddfaa176ec2307f6e98f4de383
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=15136bcd6c18d42d4b19d2f399968e9704d48a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:c8:95:84:47:f7:d3:b1:05:e4:ce:d6:8d:
85:21:cf:0f:f8:2c:eb:f5:78:5d:e4:86:7c:9e:8c:
29:a4:c2:55:10:3e:76:a5:0d:d1:bf:4e:fc:14:bf:
a4:0f:e3:3d:de:2e:02:27:fe:b2:fe:ae:5d:fb:f0:
ee:94:25:7d:1d:9b:cd:54:7b:a9:b7:66:80:dd:f2:
e9:ad:4d:9a:8a:3d:bb:67:22:9b:b7:d6:24:d4:fe:
70:47:02:2c:90:8c:6d:7d:b5:e4:c4:81:0f:ef:dc:
8f:b7:e9:f0:04:13:cd:d3:68:22:9d:59:65:0b:76:
cb:68:52:91:28:b6:23:30:c6:54:b3:ff:54:77:de:
b4:0c:19:8b:62:89:27:bf:02:35:79:f6:04:90:48:
a7:cc:1a:36:a1:d3:9d:fa:c6:b9:23:05:23:92:af:
90:ec:b3:80:da:36:4e:4e:b7:31:53:17:33:a6:89:
94:4d:8b:16:5f:b4:c2:e8:54:9e:12:92:ab:e5:23:
78:69:16:e5:c4:d3:38:f2:7d:cd:5a:0c:2a:43:36:
bd:71:f6:34:ef:86:d1:57:28:12:cf:f1:c2:4f:f8:
5a:c5:77:15:69:33:2a:49:69:94:b3:22:bd:1a:d7:
78:1a:bc:bf:68:c3:40:8c:c7:76:3d:76:da:45:0e:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:6B:CD:6C:18:D4:2D:4B:19:D2:F3:99:96:8E:97:04:D4:8A:19
X509v3 Authority Key Identifier:
keyid:8F:7D:D9:09:2B:29:44:DD:FA:A1:76:EC:23:07:F6:E9:8F:4D:E3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j33ZCSspRN36oXbsIwf26Y9N44M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/90c5b9-6d77-43d9-8e64-d6ecad2d5132/1/j33ZCSspRN36oXbsIwf26Y9N44M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:59:69:42:c9:be:13:3d:e2:8d:f7:da:27:9f:60:0b:0a:
a1:8e:94:37:d9:91:da:c4:48:83:be:ab:d3:90:63:9f:76:27:
b9:35:aa:ba:ea:05:ee:4c:8f:c7:0c:a7:82:46:45:30:a8:be:
fe:df:ea:75:a6:6a:39:f0:68:f1:8c:df:46:c4:9f:c3:21:19:
ae:1e:ec:97:06:9f:85:c3:68:9a:de:cd:b2:13:42:cb:2b:27:
76:2e:5c:60:8f:68:8d:31:6c:6a:d4:ae:ef:17:8f:78:01:4b:
75:96:34:48:2d:0e:f7:70:08:dc:b9:4d:68:da:d9:bf:a0:ea:
a5:9c:c1:d7:3d:d5:5c:18:d3:31:24:5b:3a:f1:54:ad:39:35:
94:da:d1:84:37:60:be:4b:81:3d:e9:12:e3:99:a1:5d:7f:5e:
d6:0d:0f:48:d9:bb:51:37:dc:88:1a:42:6f:d0:94:20:a0:d6:
da:4f:93:a2:c2:de:0d:ed:0f:9b:82:1d:b1:4c:07:56:59:2c:
48:85:be:74:82:37:14:ad:84:25:b7:66:fa:98:93:06:69:29:
6a:10:01:50:cf:44:68:00:a7:5b:d2:e1:fe:cb:30:60:7a:34:
d8:00:70:ec:f6:86:7b:19:32:66:a0:79:5a:00:54:bc:35:78:
cc:9c:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:28 2025 by rpki-client