Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: glUvWZI+G+5luKTe0DuGWp2wQRad43aZSlt1EbZGp1Y=
Subject key identifier: 9B:51:4D:83:65:7E:B0:7E:BC:82:95:04:EE:E2:7B:16:67:CC:AD:EB
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019A71B85C5720743594B268462A4C259561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 0723
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: 6NVJdGT26rJJMZKPHabcEXagitLGV5Qo38oK9eKETEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5c:57:20:74:35:94:b2:68:46:2a:4c:25:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=9b514d83657eb07ebc829504eee27b1667ccadeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:dc:b7:27:26:d0:d8:ff:44:fc:ce:9d:3e:
48:bc:c6:19:f1:bb:8c:e8:bf:1e:13:36:74:8a:a9:
18:75:ef:cf:3e:b8:e5:dd:b1:29:40:54:68:25:e8:
74:e8:c1:21:cd:f1:0b:5f:31:e9:f5:9a:7a:a3:2a:
1c:39:31:62:33:f5:c2:1c:66:30:59:84:c3:68:f1:
99:c4:74:80:9f:ec:70:ad:c8:61:ca:32:3d:7e:69:
f7:55:ee:8e:b8:0e:8d:00:3c:e6:40:0e:e8:5a:3b:
8f:b8:3a:84:bf:1c:32:7a:b4:95:9d:64:87:35:03:
26:90:e5:3b:b4:e5:e4:81:a1:f6:2c:a1:d9:e1:b4:
8b:36:37:b8:46:68:43:83:2f:72:5d:98:84:4b:86:
30:f1:dc:16:72:7d:69:23:65:db:27:d7:fd:15:00:
b8:e3:f2:26:51:0a:0c:20:e5:8d:8b:53:1c:0a:c6:
0b:53:59:0b:47:07:e4:a5:ba:39:e0:b0:fd:bd:50:
a5:de:7f:49:36:14:b9:b3:c6:c6:4c:da:d7:f4:cc:
12:7e:2b:6f:c5:27:e0:f2:1d:e5:ba:b6:71:fb:1e:
08:ac:fe:2d:4f:45:3a:e9:29:e4:30:79:9e:9b:00:
63:ea:89:d3:ae:b8:12:c4:3d:69:b2:fa:1b:ca:42:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:4D:83:65:7E:B0:7E:BC:82:95:04:EE:E2:7B:16:67:CC:AD:EB
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:16:27:6b:50:07:4e:70:2f:30:50:c5:b6:4b:9f:0d:47:
75:4a:79:f7:73:17:ff:a1:4c:37:2f:56:25:5f:24:ba:c9:45:
cd:5e:90:bd:2e:57:a0:22:2a:f9:0c:49:f8:d2:58:99:89:44:
df:3b:e8:f2:ee:9f:60:d6:77:ed:c1:74:72:73:9a:5c:6a:a7:
08:52:13:63:81:a3:53:65:6e:12:63:8b:f5:57:bd:de:b6:c8:
92:bb:60:70:69:3c:b8:50:c6:24:4b:4b:9c:02:f4:1d:83:51:
c2:05:48:ae:3e:0f:9f:9f:10:49:34:54:89:b4:38:e7:f8:4d:
b6:81:8f:18:13:4d:6e:4d:ca:a1:dd:16:39:83:3d:e4:45:56:
fc:0a:b6:73:c2:4e:84:c0:b4:70:ba:45:82:3e:74:ba:47:e6:
2c:18:ec:f3:ca:2b:05:f0:e3:50:d5:38:a0:75:b7:5a:2e:9a:
5c:f9:7e:4c:9b:59:53:49:e3:80:35:b4:f3:2d:c8:5f:bd:a1:
84:0c:48:ef:a4:9e:c5:0e:5d:59:eb:20:23:f8:07:9f:b5:26:
a9:26:60:a6:55:0e:e0:5b:3c:19:43:b4:13:19:d3:9d:81:5a:
40:a9:26:c1:f8:fd:bd:d1:c1:7c:f5:e6:19:ad:be:e1:63:ba:
e6:e2:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:09 2025 by rpki-client