Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: ne09vnwCZKg55Ph9hQ2EOwFaEtY59WXoQgVOIIQehVo=
Subject key identifier: 33:2B:64:31:35:DB:64:20:31:36:E4:A5:22:5F:A0:8A:76:5F:4D:FB
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 019A7293443E89043FFC1B0BBFE5E61AFB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0C9C
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: z4/EkjXgYurDtLRgfsWmrsF9oKGd08yAZ/XMZY7i5U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:3e:89:04:3f:fc:1b:0b:bf:e5:e6:1a:fb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=332b643135db64203136e4a5225fa08a765f4dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:8a:17:f1:60:a7:ee:9e:68:9c:50:dd:80:
8d:e7:da:0a:8b:13:69:39:42:89:b6:16:cf:90:97:
08:5d:94:a0:ce:5a:ff:fd:2e:83:13:07:55:1c:27:
f9:d7:24:70:91:3b:a6:c0:cb:e0:0d:de:bb:50:6a:
22:5d:d5:38:2f:a2:09:08:cd:24:d3:f2:27:0f:06:
43:8b:9b:2d:61:3d:7a:de:43:f6:54:44:6a:44:b5:
e0:13:11:05:ad:fe:54:37:52:11:85:8e:27:e5:59:
a7:24:dc:1a:c5:64:65:bd:2c:90:d7:e6:29:ec:03:
8e:15:cb:09:9b:fc:36:6a:cc:c3:89:f1:c2:a1:33:
1a:1b:5b:8b:f8:a0:74:56:fb:97:b8:e4:06:90:56:
b8:42:54:34:27:c9:97:49:8e:3c:a7:d7:b8:63:35:
63:00:88:e8:88:3c:74:4a:b7:30:8b:43:b8:46:29:
a3:02:5b:1f:c8:f6:c3:9e:5c:6f:4c:00:0b:7c:b6:
90:ee:5b:93:e9:93:ea:11:ce:64:87:9f:51:cb:15:
d1:9a:3c:33:46:e1:93:de:99:bd:38:44:a5:5b:00:
10:9d:8f:38:b5:1d:12:3a:90:14:da:9c:33:11:b9:
08:fc:15:16:c5:0f:61:31:3e:b4:50:49:c8:27:e8:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:64:31:35:DB:64:20:31:36:E4:A5:22:5F:A0:8A:76:5F:4D:FB
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:14:c9:54:95:96:0d:43:a1:53:0e:bb:c0:5d:bf:06:45:
52:cc:8b:c0:8b:99:af:e6:a0:c0:01:6b:70:ea:6f:d4:23:24:
72:f3:6a:46:ff:d1:d8:c0:4f:a6:6e:4b:27:38:08:82:c3:b5:
f6:0c:ab:89:2b:cd:0e:11:e3:c6:b5:44:d3:2f:bc:66:57:df:
b5:0e:da:ff:08:07:5f:3a:89:7b:91:10:d7:ef:09:3a:d7:9f:
cd:4d:86:bd:04:aa:93:fc:b9:eb:8e:eb:cb:5a:67:09:e8:e8:
72:26:e7:f4:e6:3a:6e:29:d0:c1:1c:2f:32:32:a5:72:d2:e5:
5c:0b:a0:23:01:14:b6:7d:78:5f:aa:af:13:9b:ac:cf:73:46:
c1:67:e0:5b:07:c4:27:96:b7:ff:44:60:fd:3d:9a:6e:3f:fa:
b6:02:f1:5e:3a:cd:0e:89:2a:d7:0f:b0:59:c9:31:9a:7e:c0:
21:35:1c:b8:ad:c1:fb:01:44:dc:ca:21:92:3f:d4:6b:db:ae:
3a:1d:ed:bf:f7:cc:3f:d3:5a:d8:8c:92:b9:b2:7d:2e:d9:fa:
62:f2:c6:f9:43:13:01:f5:e5:c4:09:a6:0a:e3:0c:6a:64:d0:
0a:64:8a:97:e8:e1:2f:89:d1:f8:37:98:10:66:1d:28:78:3f:
00:83:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:35 2025 by rpki-client