Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: txSz4heqyblw26gQpguHJzynXGQicyJx+kWQebWSKGM=
Subject key identifier: CA:B2:73:2E:08:89:86:7C:93:BA:3D:7B:76:3A:0D:8A:67:CA:75:3A
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 019A72938E539945812E05752A231B673BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 12F0
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: Cy4egdUtn1CQjYNe+HPfAXIyD2yLUbgS7hrWYKSoAQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8e:53:99:45:81:2e:05:75:2a:23:1b:67:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=cab2732e0889867c93ba3d7b763a0d8a67ca753a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:ed:74:bd:cc:35:10:44:01:12:98:03:10:
09:54:05:c9:95:f7:90:c8:b0:a1:33:12:dd:46:68:
cb:53:93:fd:a6:0f:27:e1:56:c0:8f:9c:b8:75:45:
b9:72:52:6b:1e:07:04:89:f7:63:17:91:3a:57:f6:
6b:9f:bd:ef:3f:5d:f8:a5:8a:2c:63:9b:4a:64:9e:
a7:42:d3:9a:ca:b1:c8:72:6c:79:0f:51:db:d3:04:
7b:3f:3a:3a:49:1e:0e:0f:67:68:dd:68:a2:92:bf:
10:66:38:39:2f:6a:e4:55:01:42:29:9a:a1:d9:41:
fb:45:ec:78:b0:76:5c:66:2b:12:ee:9d:1b:c2:6b:
38:56:81:95:47:0e:07:6b:cf:11:b0:02:6e:59:07:
40:df:ec:46:bd:9a:87:8a:b4:5e:c5:b0:da:71:40:
5f:99:21:73:3d:24:66:f2:7f:b8:26:56:12:5e:f9:
56:f1:2c:3f:21:96:e0:37:11:1d:74:b7:f3:f8:05:
e4:ec:6e:0e:fd:47:26:68:3a:7b:46:a3:2b:83:d3:
33:11:6c:b1:c4:d8:5d:a8:21:a9:4c:76:04:a1:59:
df:e3:19:2a:fb:12:bb:45:3c:e7:5b:26:d8:38:65:
0c:59:1a:d4:3c:0f:eb:cc:d8:5c:b8:ca:9d:67:6c:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:73:2E:08:89:86:7C:93:BA:3D:7B:76:3A:0D:8A:67:CA:75:3A
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fa:62:96:48:df:cf:c8:be:8b:96:65:9c:b8:e4:7a:0c:1e:
e7:74:9b:10:31:e1:45:8f:37:0b:ac:1a:63:f4:27:42:d9:3c:
77:4f:ea:b4:b1:cc:66:41:0b:28:b3:84:81:52:d8:8f:fd:86:
05:27:24:ae:48:96:24:db:a1:a0:f2:72:7c:8a:c7:0d:72:71:
34:19:46:dc:ca:91:f1:aa:1a:cc:87:ca:ea:91:e2:98:87:6a:
6a:ca:1e:3b:68:92:63:10:e3:06:a2:b0:ba:3a:46:c6:8f:dc:
30:19:65:93:fe:af:15:6b:2a:06:fb:20:cf:f6:d8:f9:1a:ea:
74:5f:e2:41:34:15:3d:a8:41:e8:26:73:4a:8c:c9:ec:0b:5c:
cd:4b:10:50:fc:55:ea:74:50:49:1e:53:d9:05:a2:c8:3e:4a:
a0:1b:42:b6:17:03:49:b1:a1:74:56:bc:4b:dd:ab:59:3e:29:
dd:ce:f2:bb:c6:ee:27:89:6a:c2:97:ff:95:57:78:26:d2:fe:
ed:c4:c2:ab:e3:e1:b3:2a:57:da:70:d2:11:e2:bb:c5:e9:81:
84:ff:1b:67:94:34:f7:77:f8:94:d5:11:6f:da:77:40:96:ff:
e6:c1:06:7e:95:3a:8e:9b:66:58:83:68:30:a0:43:48:db:75:
eb:f5:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:04 2025 by rpki-client