Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: Cv2h0qGaCBdcImpoZZe2/Leyf+7muUU1DK4k+pdE2NU=
Subject key identifier: 61:FA:FE:B8:00:08:26:42:9E:CD:8D:99:B5:4F:96:DA:B9:06:69:6F
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 019A72261FD88B7D908D8B1B49EE6EBCE365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1317
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: RQn8cRQDIWb8G3C1IgJLQ7U9P/URtQiIGHXadkNxYdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:d8:8b:7d:90:8d:8b:1b:49:ee:6e:bc:e3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=61fafeb8000826429ecd8d99b54f96dab906696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:bb:1a:e8:e3:d1:50:d4:78:8b:6f:e7:79:
db:23:94:a8:e7:74:a5:b6:ca:8d:01:3e:f3:0c:93:
6c:07:f7:22:44:b4:75:af:9b:85:4b:3b:60:6e:22:
1c:65:28:fb:db:10:71:28:e2:e0:1c:ad:03:90:f0:
3d:8a:67:09:29:74:a5:23:91:ed:81:9f:a7:dc:b0:
c0:4a:3d:76:88:ac:fa:b7:df:88:bf:b8:5a:e6:75:
c0:1b:92:33:4f:a6:1f:c9:49:99:4e:89:bd:d2:03:
f2:5e:2f:a8:5d:1e:4d:8e:1d:e1:ab:91:28:db:87:
48:44:18:6a:7f:43:47:40:4c:2f:3b:64:3b:3e:09:
1b:a4:e1:dc:71:ba:f7:06:fb:a8:65:38:c8:c2:0f:
82:da:3b:a5:89:d4:e7:f4:b2:e6:14:07:6f:d8:b0:
10:ff:2a:f7:71:6c:8a:2c:e4:cd:bd:80:da:b8:92:
ee:9b:1f:7c:92:b4:37:e6:66:10:21:f1:4c:3b:97:
68:03:f3:89:fa:75:00:ec:64:fc:ad:41:08:df:3e:
ce:f8:09:f7:11:77:20:43:11:bf:bf:70:fc:56:d3:
b3:aa:24:b6:22:72:cc:9b:36:ff:ef:79:98:83:20:
50:58:7b:e9:69:94:b6:c9:64:2f:2b:70:e9:d3:34:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:FE:B8:00:08:26:42:9E:CD:8D:99:B5:4F:96:DA:B9:06:69:6F
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:32:22:7a:9e:76:b4:01:9e:f0:21:49:b7:e4:6e:81:16:a5:
9e:56:e7:e4:ba:76:93:a4:4c:fa:aa:8d:eb:d5:fa:8f:98:0f:
fa:6e:95:39:ad:9d:29:8c:ee:18:ff:05:0a:ac:26:65:f4:98:
3f:88:6d:c0:3c:5b:4a:85:4d:e8:ba:c0:00:4a:99:25:ab:11:
50:a0:83:67:bf:40:dd:7b:88:ed:55:6b:89:e5:98:e1:22:28:
f6:00:98:9e:1f:3c:0b:00:e1:08:23:f9:71:13:eb:aa:82:5d:
8f:ad:88:cb:fb:4d:47:44:90:c6:f2:51:5d:32:18:4a:16:71:
09:d4:6d:4e:e8:da:73:40:09:ad:c2:a3:29:8b:83:4b:c6:f3:
1a:e4:74:86:6b:7d:0b:f1:34:82:f3:60:87:85:9d:6e:04:69:
64:ef:83:ef:66:27:34:c7:b4:a0:73:eb:1f:d0:21:43:d6:42:
03:3c:1b:54:76:3f:29:f4:83:0d:d5:71:50:10:f7:b2:13:ac:
85:7b:33:75:ef:46:36:c4:71:1f:56:10:74:bf:c7:50:5a:0f:
32:bf:ef:4d:0f:85:dd:96:30:1a:aa:dd:8d:71:c4:55:89:49:
c7:bd:19:46:37:5f:ce:d7:0c:de:c6:25:3d:69:72:ac:2f:b1:
1f:63:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client