Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: HjSfPoy/z5sX4JhJcllagtXkirjRjLsAkWYSW9VkVY4=
Subject key identifier: D9:DC:F2:DA:B1:91:77:8C:AD:0F:C1:08:F9:DD:28:2B:47:46:0F:D0
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 019A70DC3D0A415F50E90CFA7A36146D4FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 104F
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: CCB+IH+1uSPVh7iYoDirIYOe1HOulwzZ9fqtuDxVnQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3d:0a:41:5f:50:e9:0c:fa:7a:36:14:6d:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=d9dcf2dab191778cad0fc108f9dd282b47460fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:60:8b:7a:db:a4:a7:44:c5:1e:65:10:46:
91:fe:c9:aa:ad:32:7d:d3:8a:78:7e:00:e3:33:48:
53:8c:9c:f8:38:79:78:fe:c7:53:9a:6a:34:bb:81:
4d:96:57:b8:ef:c0:5e:44:8b:c0:ee:93:2a:a2:55:
3b:43:cc:a8:fc:ae:98:1f:86:32:d7:cb:29:56:0a:
c7:ad:0e:f5:d5:ea:45:cd:7e:90:9a:b3:4b:ea:ee:
2b:1e:12:52:ca:8b:89:87:c3:d5:fb:7a:6a:7c:e4:
20:03:12:86:34:43:5b:d7:89:22:6c:90:83:33:15:
25:e9:2d:e0:8b:7f:14:ac:1e:df:43:93:16:a8:8e:
fa:7c:ed:11:03:36:9e:df:bc:10:86:fc:69:cd:60:
d0:ea:72:78:3d:97:2a:6f:22:4f:c8:c0:5d:7a:91:
74:be:29:3b:a1:44:e8:2d:13:85:27:0b:62:f4:30:
c0:dd:07:87:dc:fc:78:9c:a5:3d:f1:b7:a5:e7:10:
52:9a:47:e0:5e:72:f0:44:c4:cd:88:93:34:55:c0:
d2:96:95:86:40:e2:f4:4a:0d:e9:5a:49:b9:8a:08:
63:0c:75:bc:eb:b8:dd:4b:16:ef:0a:ec:3d:da:34:
c3:37:d9:e8:80:3b:64:cc:25:0d:33:6c:29:03:aa:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:F2:DA:B1:91:77:8C:AD:0F:C1:08:F9:DD:28:2B:47:46:0F:D0
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:2a:7f:d8:de:b6:61:54:76:de:b0:1c:68:23:c8:2b:5e:ce:
88:04:6e:73:76:90:7b:a6:3d:5f:bf:0d:0d:ce:c6:ad:11:fd:
de:77:7f:71:9c:a4:6f:2d:20:f7:4b:9e:8a:23:96:14:d0:1e:
c3:1e:a6:af:ac:05:f7:b0:36:a3:63:7b:0a:d7:12:fe:be:60:
78:14:a4:4b:d2:49:86:f3:95:6f:21:85:f9:2b:ca:be:8b:38:
8e:98:33:81:c4:dc:83:c5:d1:6a:7a:bf:2a:18:c4:a4:c1:0e:
96:62:8c:dd:e5:f5:94:48:cc:4d:41:77:be:a8:50:5c:ed:79:
ee:8f:93:44:c3:9f:22:ed:32:f7:47:fe:cd:aa:0e:bf:4d:d3:
08:5d:7b:58:ab:74:ed:4c:dc:71:22:49:21:5d:44:2c:2b:d8:
be:25:b3:97:0e:6c:91:da:8a:8c:82:15:9c:4a:29:93:62:f2:
85:6c:da:d4:43:9e:12:c0:cb:c6:09:c2:59:16:64:fc:bf:38:
3b:a7:48:af:53:2a:ba:0b:de:d7:68:d8:f4:8c:57:f7:c0:fc:
cd:c5:b4:4f:89:3d:bb:d5:9b:53:e9:31:a8:3f:f4:c5:46:dd:
4b:66:4d:ed:0c:ef:87:2b:25:95:b7:5b:37:fd:ac:a2:26:ab:
89:ec:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client