Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: /sjqOSW+fFgBUIBHeO+CM+/AYUId85yLlsvIkS3LXB8=
Subject key identifier: 76:BA:A6:EE:AC:A1:3C:65:55:73:23:77:9A:CB:C8:6B:BF:09:11:06
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 019A71B7D4E30085332401B95130F0E0F8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 083E
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: P3u941uBwsV9TgX+tYCORnh2Fix39B3fdD1BtAEkusI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d4:e3:00:85:33:24:01:b9:51:30:f0:e0:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=76baa6eeaca13c65557323779acbc86bbf091106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:e0:99:6d:2d:c6:89:7f:31:ba:53:ab:d9:
ad:a7:5c:eb:80:09:86:b4:6c:fa:0f:83:8a:9d:f2:
cf:0c:98:c5:4d:5d:9b:0f:ad:c3:d5:85:e7:d3:41:
89:6a:54:06:da:28:e7:61:25:57:d3:03:a9:63:3e:
52:e2:e4:6d:0c:07:87:59:2f:f6:cd:5e:2c:18:0c:
fe:4a:ce:c8:8e:40:6b:57:70:18:f6:db:2d:2b:f9:
d6:1f:33:5c:fa:bd:69:f4:60:d6:09:31:75:23:55:
da:11:85:9b:3a:d3:79:de:53:87:84:10:38:b0:1e:
e4:d5:c1:ef:8c:2e:83:1a:06:6a:78:65:f0:1c:23:
cd:93:f0:26:67:08:72:ba:3c:86:f8:14:60:69:8a:
aa:ce:84:23:ff:2d:95:58:ea:7a:37:46:d6:13:f7:
4c:3f:79:59:e7:d8:94:0f:3d:f6:29:b4:e4:4d:09:
55:76:38:b0:cf:b1:9f:ae:67:7b:0e:f8:cf:4d:20:
c1:24:e4:2f:82:7b:cf:9b:fd:0c:e5:b1:9e:a5:3c:
eb:d2:d8:36:3a:26:af:b4:13:b2:bc:e8:07:fa:35:
d4:79:e5:e3:99:2c:01:73:e2:3a:13:55:fa:db:d1:
39:33:22:5e:21:2c:38:c9:d4:29:23:04:23:fd:7b:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:A6:EE:AC:A1:3C:65:55:73:23:77:9A:CB:C8:6B:BF:09:11:06
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3a:5c:00:c6:7b:52:48:6c:db:5e:9b:3d:46:16:dd:92:c2:
7b:54:82:47:ba:01:df:6c:05:0c:41:09:83:53:27:d9:18:51:
5d:e2:02:22:13:c0:f5:45:2f:3f:2d:1d:7a:59:8f:50:5f:03:
c8:42:a3:1e:98:9b:96:4c:49:d4:53:1f:95:12:b6:a5:26:74:
e8:57:66:a0:0c:31:4b:21:ce:87:29:7b:d7:55:30:7c:1f:96:
da:46:3d:f3:9e:95:5c:c1:cc:41:35:19:75:14:87:77:e7:81:
22:c1:c2:87:04:49:06:14:00:10:cf:c9:9b:71:b8:9b:f4:64:
07:0a:27:ef:d1:b3:44:f7:1f:c0:f7:17:5e:ed:23:85:21:a6:
2f:7d:8e:3e:c2:51:cf:00:b2:33:7d:2c:42:db:fe:4a:fa:29:
09:d7:27:02:2a:09:77:60:69:27:e1:01:0a:e3:a9:e9:27:2c:
bc:ec:b2:6a:f8:63:02:c6:70:70:00:14:6b:5a:f0:d1:c2:db:
00:66:f2:80:cf:42:44:2a:3a:3e:56:7a:46:08:36:16:bf:31:
31:ac:21:c4:0d:5c:67:67:04:e7:1b:c7:77:8f:49:88:6d:50:
d5:32:4e:43:b5:78:52:b1:94:f6:89:f8:ea:b4:24:56:0e:1e:
0e:8f:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:19 2025 by rpki-client