Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: O1GWNKtYjlF7fNWmGyQcs1HghnUfOFq4oPjkuvWj2A8=
Subject key identifier: 65:3B:C5:89:F1:6F:45:FE:93:5D:0B:33:BB:D0:C0:DF:03:F6:71:0D
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 019A706E13DD6E7C9ED58E7489F54CD97FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: aVccEaVM3sl2jYOjkD3iGRVnZvWdOMJUoKf+aMO27vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:13:dd:6e:7c:9e:d5:8e:74:89:f5:4c:d9:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=653bc589f16f45fe935d0b33bbd0c0df03f6710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:ce:5c:44:25:06:f9:d2:db:3d:fa:20:08:
31:c4:a7:b7:b7:9d:aa:c2:cb:8b:3c:a3:1c:b8:c4:
eb:36:4a:69:67:44:f3:e0:f1:14:a3:2f:1b:9e:45:
4c:02:d6:99:62:3c:9c:2f:27:d6:1d:e0:3b:04:ae:
76:16:5d:ea:2d:69:95:3c:af:0a:c7:13:9f:20:56:
35:21:7b:eb:15:e8:33:3f:57:f5:01:d8:d7:b8:9c:
2a:63:67:85:f8:d0:f1:49:aa:c6:83:7f:ad:0e:78:
e0:7b:27:a3:79:a6:7b:fa:cc:80:cd:56:fb:84:a1:
0a:57:f3:21:23:ca:54:3c:c9:7f:81:c5:3b:52:81:
a0:0a:c4:ed:c4:74:73:98:27:d0:06:85:a6:92:2c:
e6:73:d3:9e:19:f2:1a:1b:8d:2d:27:b9:c2:e5:26:
36:49:a5:d3:3a:e7:fc:9b:04:3a:bf:a0:41:61:07:
be:78:f8:57:a2:b8:4a:50:c7:76:9d:a1:82:a4:b1:
f1:d4:a2:d2:82:04:46:4d:33:35:1d:50:52:dc:3e:
f3:56:93:c5:ac:38:2a:79:0a:89:b9:a8:e6:2c:fa:
2a:c5:a8:f1:42:53:2b:86:e8:fa:98:3b:cb:ce:88:
2b:50:a2:8f:07:4e:f6:c1:e7:3e:d1:a7:84:eb:15:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:C5:89:F1:6F:45:FE:93:5D:0B:33:BB:D0:C0:DF:03:F6:71:0D
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:b9:ac:51:1e:3a:e9:6c:2c:7e:d6:03:06:c5:61:07:7a:
52:ab:0b:c4:64:bb:dc:79:e2:3f:af:20:53:d8:b2:88:88:3a:
aa:19:18:1a:2e:56:86:ef:25:da:3a:5b:23:01:ca:29:03:98:
0c:85:4d:cd:9a:0b:25:2e:9e:fd:cc:58:3c:ae:e5:aa:24:bc:
72:14:ca:8c:26:79:f0:14:00:a6:30:9c:ba:e1:4d:96:cf:02:
7a:1f:94:83:39:5e:52:d3:25:85:e2:24:0a:32:9f:d5:68:f3:
e2:06:54:33:8d:d2:17:04:59:ea:54:dd:fc:bf:48:d5:e0:a5:
2e:4f:b8:fc:d5:9c:6e:a5:88:0c:bc:58:2d:ea:c6:da:ef:21:
8c:c7:30:f0:3b:55:65:f7:be:94:f6:b5:db:c4:2b:95:e4:de:
4d:b5:ea:95:ca:8b:c9:76:95:23:ed:e7:79:39:4b:3e:7b:19:
43:53:ef:99:43:4c:1e:96:e7:ec:c9:4a:de:3d:12:7d:84:df:
8a:30:31:9c:a3:ad:f5:49:e0:9c:d6:a2:72:dd:dc:03:eb:da:
e6:a3:ed:c6:43:62:85:7f:f1:f4:67:c2:89:68:23:26:cf:27:
a5:ba:d9:f6:ad:ee:12:f6:5a:09:02:6e:dd:c0:5a:5d:ff:f8:
83:49:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client