Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: ehZu8QcY7yySF8lir+Nqa4g8joqY6gfgMF+9JbZcEI8=
Subject key identifier: 10:79:17:B6:00:5B:78:C8:67:19:B3:11:5E:66:E6:A1:13:47:D2:E1
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019A71B8AF562E3783035D6003EDB384087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: tARsa+3u+M1Ue81JA2Kg6+T9CF6J0VJ/vcWnOFho+7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:af:56:2e:37:83:03:5d:60:03:ed:b3:84:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=107917b6005b78c86719b3115e66e6a11347d2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:cf:c9:a8:76:17:c2:63:21:4d:11:78:b6:
42:84:3d:4e:64:d8:1e:25:ef:a6:ea:84:03:75:6f:
7f:a3:d2:cd:eb:c0:a1:05:b6:fd:1b:46:cd:bc:46:
bc:b3:8b:b0:27:b8:1f:7e:5e:68:40:4b:08:6a:fd:
66:50:e5:e1:ca:21:33:42:90:6d:09:7d:4e:db:3b:
db:1f:99:e9:9d:65:3d:e4:df:ba:36:83:74:32:a9:
4c:e8:a3:53:2b:e0:d9:c1:09:42:39:5f:07:ed:01:
e4:d0:06:c2:a1:c1:3e:f0:7d:e3:bd:ae:16:05:90:
5f:b0:39:92:fe:b6:b4:f7:75:40:00:6e:4b:0c:d4:
01:57:28:69:db:92:27:d0:87:fa:74:c4:51:5b:4d:
bf:5a:5c:0f:31:ab:ef:40:8e:65:65:f3:68:4d:7b:
5b:17:4b:70:fb:60:c0:0b:4f:35:d1:13:b0:44:9e:
80:fc:6b:1b:33:94:4d:43:26:b6:cc:ec:ce:18:34:
92:bb:46:3f:93:9a:3c:fe:18:b0:19:e8:3f:d0:56:
8a:63:15:48:db:bd:bd:61:70:3b:bc:ca:fc:0d:62:
4e:34:f0:4d:bc:d3:7b:33:b8:6c:0e:a7:a7:e0:1f:
2a:a5:95:ca:8b:16:91:10:74:8c:bb:f4:40:09:5e:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:17:B6:00:5B:78:C8:67:19:B3:11:5E:66:E6:A1:13:47:D2:E1
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:35:de:d1:d5:47:0b:d6:bd:c6:05:28:d5:e3:49:94:fe:42:
92:25:93:6b:e6:ee:34:b1:bc:9e:fa:65:9a:f7:6b:6f:2b:99:
a7:96:55:53:d9:ea:71:c8:0f:29:31:5b:98:da:78:87:db:2a:
55:57:19:b5:20:2c:2c:e1:d4:61:f6:22:92:bf:51:b3:e8:10:
2b:0c:62:d9:36:52:16:45:60:56:64:a1:9b:80:9a:21:3e:dd:
63:10:43:31:b0:53:a4:8b:53:09:b0:fa:72:c6:f4:2c:86:12:
90:4f:97:db:81:62:5e:a5:cb:aa:c5:ad:d9:f0:bb:04:dd:68:
17:8b:92:bc:b0:e7:8f:11:fe:0e:62:b8:54:cb:26:41:2d:21:
18:fa:11:07:ad:95:64:7f:64:72:b2:18:16:55:5b:38:71:8b:
fa:ac:1a:8f:4f:4a:1f:3b:57:f8:37:ca:18:e4:ac:57:9b:74:
c2:e1:06:dd:e7:6d:64:29:24:16:7d:19:9f:d1:8b:b1:28:5d:
f3:11:65:2d:f2:21:8f:f3:a7:fb:3d:95:28:e4:67:f1:d8:bf:
ef:1f:c0:55:ac:02:86:d7:78:49:b9:8a:a1:84:2e:57:0b:42:
c6:b2:c9:0b:35:6f:fd:6d:4c:64:b8:55:61:37:f7:7d:b6:32:
91:af:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client