Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
File: JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft (raw, json)
Hash identifier: wSBmrJDz+++W+peX3zWZ54wqg+hTz2YHO+SvwD+EHR8=
Subject key identifier: D0:DE:04:E2:60:E6:88:18:26:D3:5E:CA:FC:B3:C2:6E:D5:EC:C8:D9
Authority key identifier: 27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
Certificate issuer: /CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Certificate serial: 019A71EE8AA0C241E29D1C031340EA9042DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
Manifest number: 73
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl (hash: tkkInKXroRBImav07c5zyi4CiWFE5FV9pYf+36FDVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:a0:c2:41:e2:9d:1c:03:13:40:ea:90:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2736cb723aedd55aec34f400b76cc4678ccba1ba
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=d0de04e260e6881826d35ecafcb3c26ed5ecc8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:2a:0a:28:b2:32:e7:fb:00:39:2b:4f:ff:
8d:6e:1c:3d:9a:70:5a:c8:4e:46:34:02:d0:a3:cd:
e2:b1:50:41:82:be:90:ee:12:3f:35:3a:74:a9:49:
d8:bf:a5:90:e4:a2:3b:0b:0b:38:73:f0:95:97:1b:
27:a3:45:2c:9c:94:6b:fc:de:b3:77:33:20:88:06:
35:e7:b3:b9:d6:08:72:0e:8d:20:95:df:29:c0:41:
d4:2c:37:85:65:11:96:f5:dc:49:c8:c3:da:be:d7:
72:c0:39:a5:64:fe:7f:8e:9c:df:0d:86:61:2e:28:
eb:85:2c:7c:17:1e:8e:82:b4:19:3c:e3:85:c4:5c:
56:04:92:47:19:5d:fe:e8:e4:87:ba:4b:73:87:32:
75:ca:57:47:a5:82:41:04:6c:a1:c2:c3:2a:47:05:
98:f2:e4:e6:02:d0:8b:74:c6:cc:6d:c1:89:b6:14:
f6:a2:fb:36:57:3f:aa:78:1c:a7:b4:5b:29:4c:aa:
01:b3:2a:f8:cf:d8:a3:38:30:17:84:08:aa:1d:6b:
54:c0:1b:d6:3b:66:76:3e:3b:65:a2:ee:e6:9b:4a:
a3:79:88:33:d7:fb:67:fb:9d:23:53:e2:21:75:b0:
43:6c:64:08:41:64:8d:08:b7:4f:6c:2c:71:69:0b:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:04:E2:60:E6:88:18:26:D3:5E:CA:FC:B3:C2:6E:D5:EC:C8:D9
X509v3 Authority Key Identifier:
keyid:27:36:CB:72:3A:ED:D5:5A:EC:34:F4:00:B7:6C:C4:67:8C:CB:A1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzbLcjrt1VrsNPQAt2zEZ4zLobo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/aabb03-2ac8-4065-af8c-47ef2a98b22d/1/JzbLcjrt1VrsNPQAt2zEZ4zLobo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ad:b1:ea:17:8c:ed:69:75:23:9a:b2:cb:79:30:51:62:d8:
be:83:fc:3d:0e:00:b8:0d:7d:fa:16:b1:f7:13:59:38:74:6b:
b2:ea:8e:84:83:29:51:e1:58:2c:27:ad:fc:68:40:5d:2f:12:
20:8e:57:4d:1b:b6:c4:b0:7a:14:99:29:0b:23:b0:30:75:a1:
b0:9f:52:60:28:f5:31:6a:f5:d5:b2:e0:6a:8b:50:dd:5b:33:
c7:44:13:c9:1a:ef:2e:27:10:a4:db:62:03:f6:3e:af:f1:53:
ea:27:ed:a3:ff:f1:5e:50:0c:b7:5e:4f:ef:7d:0d:db:1d:8e:
56:4f:f7:e5:29:98:16:b3:4b:12:e0:84:fe:c5:f0:75:b2:c8:
c5:88:76:30:97:c5:f1:c6:94:fe:0f:0f:72:72:60:5d:3a:57:
44:f7:b8:71:2b:53:38:de:51:33:e0:47:0f:bd:ab:e8:0c:79:
bf:ec:ed:01:54:3c:f7:c6:ea:21:8d:d7:18:3a:98:24:ff:1b:
3a:94:13:62:0b:7e:18:7d:c9:10:b2:ed:6a:04:de:1f:f8:48:
9a:b6:31:62:d8:b8:f2:d2:fe:88:4f:eb:f0:e0:8b:34:84:a8:
22:7a:8d:4d:f6:02:40:89:8c:83:3f:1b:75:47:92:ac:f3:59:
38:f7:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:10:21 2025 by rpki-client