Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: PvOVIas/ps0DzFEaPZQNDLHfK/ghwDrUo6Mi5WPI5YQ=
Subject key identifier: 2D:14:D6:FB:83:01:7A:40:96:59:A9:E9:38:99:22:7C:D7:86:5F:BF
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 019A73A709E5BAE027594DC3D0378AF913A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 04A6
Signing time: Tue 11 Nov 2025 16:01:58 +0000
Manifest this update: Tue 11 Nov 2025 16:01:58 +0000
Manifest next update: Wed 12 Nov 2025 16:01:58 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: RpSs9PVdgN9D9FZ5rJ9+wGumm8KItvWWUd0xM+MgOnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:09:e5:ba:e0:27:59:4d:c3:d0:37:8a:f9:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Nov 11 16:01:58 2025 GMT
Not After : Nov 12 16:01:58 2025 GMT
Subject: CN=2d14d6fb83017a409659a9e93899227cd7865fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:5b:32:e3:d3:2c:1a:92:21:6a:c4:de:c4:
cd:e6:bb:71:f9:84:32:aa:86:87:42:07:62:30:c6:
c1:cf:ed:c4:a4:b1:72:de:16:2b:3f:36:a3:1b:28:
a4:65:80:12:40:48:f9:4d:84:60:93:db:2e:a0:6e:
84:fb:ff:f5:6f:a1:42:7b:bc:15:af:e4:8a:bf:c5:
14:62:70:45:f0:ab:ee:24:0e:51:3b:df:bd:db:4e:
69:f7:99:a6:40:74:c2:3e:7f:36:5f:77:28:6f:50:
4b:9b:10:a3:9a:a0:ec:13:06:1c:89:57:15:ff:0a:
6f:36:c8:9d:5b:4f:65:02:60:b1:e5:e5:06:ff:1f:
e9:00:42:c2:09:7c:5a:40:d6:c6:51:5b:6e:13:db:
6d:61:e1:04:ed:bf:71:34:e2:63:53:37:f7:d0:25:
4b:ff:b3:a4:70:c1:1d:fd:29:7b:b0:af:4b:52:78:
c9:bc:9b:89:4b:85:23:0b:91:81:d4:e6:2c:fa:9f:
77:76:32:49:b7:e9:83:d2:a7:1d:b6:76:51:e4:9b:
d4:1e:f5:c3:b2:95:25:ab:97:80:d4:87:b6:25:7d:
4b:3f:cb:ac:48:57:ab:84:d9:dd:df:cb:cf:67:f7:
70:23:8e:e0:eb:a6:2c:f3:96:fc:38:5f:d7:2d:be:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:D6:FB:83:01:7A:40:96:59:A9:E9:38:99:22:7C:D7:86:5F:BF
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7e:54:fe:fa:bf:d7:40:c4:20:06:bd:f5:95:4f:56:92:f8:
29:f4:0a:f9:ba:e5:2b:d4:6e:18:68:d4:e4:db:eb:b4:76:d7:
ed:06:d7:22:cb:03:9e:71:9c:f5:38:35:cd:7d:ec:54:e1:4b:
e3:d0:71:4f:2d:bd:e3:a0:03:f1:31:b2:53:74:06:1c:d8:5f:
b6:ec:6d:ec:2c:7d:47:b6:7c:0b:32:05:67:d4:98:89:f5:d0:
66:a8:05:87:7e:00:cf:1d:7a:a6:55:48:a8:e6:62:ca:6e:93:
07:99:6e:ad:63:38:8b:9b:49:68:12:58:9c:6b:64:e6:c2:00:
f3:1c:04:c7:b4:53:8d:31:41:dd:7f:00:cf:88:e1:bb:02:e4:
51:33:62:2e:e7:9a:58:2a:96:90:e4:11:22:4a:49:41:04:64:
27:ae:3e:c7:60:64:ac:d1:97:4a:0b:a2:ea:66:34:9e:15:e7:
91:9d:35:75:80:b0:3b:86:26:d6:21:60:97:19:a0:be:20:61:
c2:20:11:5a:09:29:25:0a:5b:76:51:57:05:3a:ec:cf:68:bb:
43:bb:68:9f:82:49:2b:c4:89:e6:81:85:fc:fe:dd:8f:88:d5:
fd:05:0a:85:1a:da:87:38:56:44:1a:ab:f3:dc:73:c6:59:0a:
83:69:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:52 2025 by rpki-client