Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: SNyaXv7xYhF+K1Svu24CQWhICTPNrBYb6qi332DzTMo=
Subject key identifier: A3:6B:FF:1F:F9:7F:FC:6C:24:DE:52:BC:7E:DF:26:8A:B6:E8:AB:88
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 019A725CAB726C334E326C7F8AD7CBD09960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: IMkp2zIElL5vqKRdrXmP2O0+7o4qgqM6neYWYpitc+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ab:72:6c:33:4e:32:6c:7f:8a:d7:cb:d0:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=a36bff1ff97ffc6c24de52bc7edf268ab6e8ab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:d4:80:5d:60:39:08:b8:3c:2d:33:19:e9:
0c:d4:f7:18:d5:d8:aa:27:84:95:3b:f0:14:cd:34:
0e:50:97:4c:1a:8f:01:5d:c3:c5:cb:d5:71:fd:7b:
a2:fe:2b:b0:c1:59:33:80:f5:56:dc:ab:60:03:8c:
23:22:69:72:3d:a0:81:60:5f:50:21:4c:1e:a9:d6:
5b:9e:19:fb:77:d0:39:b0:14:88:4a:cf:24:e6:d3:
a5:26:b9:cc:91:2a:bf:b0:9b:68:c1:d6:50:23:10:
a3:8e:09:7f:c0:a7:b2:b4:07:7f:4b:f0:8c:6b:f7:
62:6b:cb:d8:3d:27:bd:2f:ee:4c:fe:57:71:ab:50:
40:ea:73:50:86:30:56:fa:c3:02:c5:04:5a:5f:c0:
41:2f:3d:23:e1:13:db:7a:65:25:70:81:5f:4b:f8:
df:c9:52:f9:3c:7d:e4:25:f5:1b:52:b7:da:82:fb:
9f:2e:ad:b9:37:29:6a:bb:36:5a:91:a7:df:a0:e5:
5c:e7:2c:de:bc:89:85:5b:2d:a4:ef:8e:1d:84:98:
72:44:84:57:35:23:87:6d:53:e3:48:b7:9a:91:5f:
cc:e9:80:af:53:e3:e4:f7:fd:74:90:ab:6e:db:e5:
7a:65:be:73:5d:42:a3:38:af:cf:42:61:d5:5b:4a:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:FF:1F:F9:7F:FC:6C:24:DE:52:BC:7E:DF:26:8A:B6:E8:AB:88
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:90:11:47:12:75:ec:d7:76:9a:23:32:7e:b3:89:06:1d:
a4:7c:52:e4:b9:78:68:f0:be:78:72:42:70:cd:f1:25:94:c2:
60:79:c2:9a:de:76:01:6f:0f:49:0f:c1:02:6d:7c:88:54:13:
25:d8:72:08:11:3b:75:9f:13:02:6f:cf:9f:a3:fa:79:a9:44:
5c:03:bb:85:12:ab:6a:d6:01:dc:18:bd:55:9d:c7:2d:db:5f:
ee:12:b9:1d:43:8b:58:22:1a:3f:03:83:ed:15:66:58:5c:de:
da:dc:4a:24:16:cc:73:5d:1d:d6:37:1e:2c:74:a5:f4:3f:65:
f5:49:9a:ab:85:24:cb:91:dd:81:33:02:42:d2:5a:ef:6b:ee:
69:72:e6:bb:a4:b1:db:c2:01:90:65:cb:dd:2e:d3:f0:26:42:
fd:e8:d1:01:46:6f:c0:34:4f:e2:13:8f:b8:b4:43:b1:68:3e:
15:14:bb:9d:fc:46:3a:10:b3:d5:8a:b2:f7:56:cd:e1:44:8f:
56:fe:20:f7:b7:94:e2:f6:32:fe:38:84:cb:f1:15:be:53:f1:
d2:20:33:85:17:21:72:4d:53:d1:9b:82:fe:a4:a6:e8:d5:54:
b2:0d:0d:47:d4:04:83:94:02:e8:d8:a7:17:46:62:ca:d7:16:
0b:6e:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:09 2025 by rpki-client