Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: umCj6r4/c6bDPyM1V6JAxv2hnvdtrXLIPdC8RQ17qis=
Subject key identifier: B6:1A:86:89:05:D1:20:C4:C6:7C:E5:14:47:20:8D:D6:1F:AA:A0:A9
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 019A71B771212048ED097CAA026BC0529A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0BD6
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: vd3TFuJAGKIDvX9aB3WdMkf+C3irb40D2DArfOCRzZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:71:21:20:48:ed:09:7c:aa:02:6b:c0:52:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=b61a868905d120c4c67ce51447208dd61faaa0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:fc:7b:69:be:9d:e0:63:eb:c5:b8:65:29:
23:fd:b7:bc:12:8f:01:35:ce:42:09:48:d6:4c:df:
63:bd:76:bf:aa:59:71:8d:d0:36:4d:fb:db:d9:6c:
9f:d6:b4:89:e0:c9:e6:5c:73:39:cd:e2:69:bf:7b:
47:23:e3:db:79:ee:1d:4f:e7:93:f5:98:74:1b:48:
73:2f:de:d2:d4:16:3b:37:8d:f8:52:eb:12:51:5d:
3a:c2:80:9b:0a:83:39:f5:a9:4d:8f:cd:d6:33:e0:
e6:74:0e:8c:1e:a9:cd:83:55:71:02:35:7f:1e:f5:
fb:d1:da:c5:09:0f:7b:b0:aa:dc:6f:74:d0:24:70:
09:c4:6a:84:10:c7:6c:d8:0d:21:35:fe:c9:eb:ef:
df:07:bb:b2:52:14:15:f3:90:fc:6e:97:38:49:92:
e7:da:77:9e:23:08:80:56:1c:95:d4:f8:30:e0:bd:
78:b2:dc:62:b4:32:d1:27:15:47:07:67:ab:c7:82:
2c:08:4c:90:bd:e0:4a:f6:cf:2e:35:20:15:23:ca:
69:8a:19:d2:a5:c6:9a:00:ef:2b:d4:69:c4:c8:7d:
37:d9:de:24:95:44:2e:a2:e0:c6:62:e9:9b:a3:5e:
5c:05:89:27:e0:48:6e:f4:d7:55:c3:26:6c:ef:14:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:86:89:05:D1:20:C4:C6:7C:E5:14:47:20:8D:D6:1F:AA:A0:A9
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:eb:72:6f:35:a0:91:1e:ea:11:3e:28:1f:90:5f:de:e3:
1f:d9:d2:26:64:f7:26:70:3d:f3:5c:7c:80:8d:ce:2a:f0:6e:
3d:6b:11:87:20:f6:b3:39:48:ca:f9:bb:89:c0:36:2e:db:69:
0d:24:f0:ea:56:e7:e4:0d:0a:89:3b:f3:35:bc:2d:33:31:5e:
c6:cd:ab:0e:d5:bf:0a:d6:6b:bf:b0:39:65:4c:9d:96:53:62:
ec:b8:6d:fd:79:12:68:f8:43:2e:27:3c:df:12:da:d2:03:ab:
6a:65:7a:5a:6d:31:18:62:d6:e4:64:6b:97:04:f3:63:ae:18:
ab:8c:1e:12:4b:03:b7:ee:09:3a:0f:17:46:b3:82:01:cb:49:
f6:25:7d:32:d4:75:bf:2e:ba:d4:18:da:68:91:6c:8e:8f:c8:
83:d6:89:e2:b4:41:a0:9e:28:a5:22:3f:a3:52:45:6d:52:f5:
a6:60:ff:7a:d0:f3:4b:64:86:74:d7:db:1d:86:93:c4:99:60:
f2:3b:7d:82:a0:08:1a:28:b2:95:93:f2:c8:a4:fc:1d:3e:fb:
6e:42:c1:ec:40:f3:49:97:f1:63:df:00:12:e5:20:cf:8c:8d:
27:9c:22:5c:07:29:0e:02:73:a2:40:cb:06:16:aa:7b:65:49:
ca:08:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client