Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File: jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier: X/8xnwusgoPbirLaNbE775utiF1SCc2IyRNYm3y/QQs=
Subject key identifier: 72:00:74:6A:15:19:46:D5:D2:08:A2:51:AE:BE:47:47:B2:1D:00:1F
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer: /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial: 019A71B7F8249905DD8C69F3F9028C945890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number: 0596
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: pPjh+vMVBOsdO1Wt0nZuni+LbP0aZKaqvOrCYGCTzGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f8:24:99:05:dd:8c:69:f3:f9:02:8c:94:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=7200746a151946d5d208a251aebe4747b21d001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:53:96:a5:2f:b3:7c:03:c5:72:82:ab:24:
98:75:67:8c:bb:7e:54:5a:ae:e0:27:5a:6d:e0:e2:
84:7f:6f:21:b9:85:de:5b:98:f5:25:25:8f:13:e2:
3a:71:9f:2c:b2:89:96:51:d5:23:51:ad:0b:cc:02:
74:4e:14:91:a8:2c:e4:43:fb:96:25:04:8b:d0:a8:
e6:66:fd:aa:bb:e8:8d:9e:cc:be:c6:13:0e:db:2b:
f4:c0:22:82:15:0d:4d:2c:5c:a3:64:83:38:a4:3f:
71:c1:ec:35:c4:63:49:b1:96:f5:3d:24:00:a9:14:
0e:7f:bb:02:b4:aa:42:e1:b9:fc:d8:ec:9c:c2:d9:
75:be:08:95:3c:40:f3:75:17:84:9d:32:5d:86:4e:
ce:c5:9a:29:27:8f:4d:73:97:3f:5a:9c:29:45:63:
7c:b2:4a:29:87:5d:70:a0:09:6a:01:ec:75:1a:13:
b8:77:8c:c5:99:7c:d7:51:78:07:15:25:1e:e6:61:
88:7d:c5:84:9d:25:ad:65:08:99:8d:87:05:24:7a:
f4:89:e4:93:84:30:54:06:0b:91:62:9f:b1:01:b3:
8b:a9:d7:81:f3:60:90:93:4f:ba:1b:ea:8c:39:72:
05:6e:85:da:da:20:bc:16:a1:fd:82:29:2f:7a:f4:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:74:6A:15:19:46:D5:D2:08:A2:51:AE:BE:47:47:B2:1D:00:1F
X509v3 Authority Key Identifier:
keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:65:d0:cb:8d:29:f3:56:ec:cb:04:85:ac:7b:3d:a8:9c:34:
6d:b9:8c:e4:88:dd:05:fa:b5:09:8f:3b:b2:f9:01:68:5c:51:
26:5c:2d:75:f5:0d:7c:fb:6f:0f:3f:69:5f:49:c8:4f:b8:d3:
ef:6d:f0:8b:85:63:3a:bf:0b:9b:e5:6f:4f:3a:07:75:3d:67:
64:4e:ea:d2:75:81:d6:29:91:1d:56:61:34:27:69:48:30:03:
45:7a:f4:6e:28:12:ce:29:67:a3:6a:23:c6:1a:25:f3:f0:72:
51:79:03:68:1b:44:c0:22:0c:f8:08:fc:d0:fb:79:2d:61:df:
ae:bc:02:ca:76:6e:74:ec:d1:6d:7e:8e:d1:ca:55:6e:de:b8:
8d:9a:b3:92:f1:a7:9c:1c:c0:49:87:1e:9b:f4:82:29:c0:a6:
0f:19:4b:6c:df:23:ac:bd:fc:b0:f9:f7:4f:5f:45:22:6f:f8:
28:96:c9:2c:48:5d:52:69:a2:8a:4c:6b:16:91:e8:e5:c8:bd:
51:86:cb:54:7d:a8:d2:5e:46:d1:4e:9c:c8:79:a8:20:01:03:
28:69:02:bb:8f:21:8f:33:8f:90:64:5d:9b:66:e8:fe:5d:c3:
66:2d:0b:60:cc:39:80:2a:78:8c:cb:01:aa:0d:c9:c6:75:c5:
5d:af:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client