Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: XCqSif98ru5HPHhA1TzdJpO1pFQI2XfbQcbIhoKfBwQ=
Subject key identifier: 49:FA:22:75:23:C8:AE:DE:49:E1:1E:0E:14:D2:9E:7E:98:AD:04:05
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019A71B8DBF533E460A0B1AF332A993503E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: B3H79UG9HYxaV3FOZkmwL0stLzPXm2HMF4XC/umipkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:db:f5:33:e4:60:a0:b1:af:33:2a:99:35:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=49fa227523c8aede49e11e0e14d29e7e98ad0405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:3b:70:98:3c:02:92:e5:20:48:a3:8e:62:
4e:1d:6d:27:3d:75:63:3e:b2:7c:4b:fd:4b:08:77:
57:71:60:ae:67:ab:c0:0b:bb:e3:e5:83:1e:2f:58:
da:f6:24:f6:cc:4b:3e:e1:fa:2b:97:98:dc:af:97:
34:82:aa:dc:12:4a:5a:da:19:71:d8:5f:12:1e:dc:
7e:4f:3f:54:6f:ba:18:7a:1d:ab:a3:f6:e7:1e:a4:
f9:2c:14:d8:07:1c:cb:bb:81:ab:b8:89:96:6f:f2:
60:20:28:91:7e:e2:41:f1:d1:73:8b:6c:83:16:b1:
f6:45:7b:65:12:3c:69:c6:21:11:03:65:bc:68:1f:
f6:26:4c:80:fb:04:c1:4e:d6:8c:ef:a8:d9:69:78:
98:29:de:18:02:f5:1b:61:e4:0b:fe:38:7d:b1:4e:
44:06:e9:54:8e:7c:e2:23:36:e3:12:54:a9:dc:99:
7e:87:19:1d:4b:f9:d8:52:f8:fe:59:f5:f5:6a:b3:
81:72:d1:b3:1c:cc:fe:0f:49:35:b4:67:4c:5a:d1:
ad:c8:9f:de:97:22:c4:30:dc:23:df:d7:bc:84:b4:
69:a6:0b:7a:d8:36:d0:83:8c:c4:5e:d8:60:c4:49:
12:93:9e:2b:2b:ad:9d:97:a9:aa:45:fb:6c:26:14:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:22:75:23:C8:AE:DE:49:E1:1E:0E:14:D2:9E:7E:98:AD:04:05
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fb:ea:f7:a2:0a:4e:42:31:f0:06:a7:de:ac:17:19:9a:ae:
a3:b6:95:88:c9:f7:67:a5:49:f2:c7:43:c9:f9:70:c7:bd:18:
f1:f3:9e:a2:f9:a8:8f:17:ba:b0:3d:44:c5:65:8b:2d:f9:7a:
d7:8d:1b:d9:4f:8e:bb:e2:d6:c1:43:28:01:e9:9d:70:a8:6c:
f5:7a:2a:80:2b:3e:02:89:e6:10:6f:f6:72:41:5c:f0:dc:35:
d6:67:17:f8:43:c1:55:de:56:a1:df:06:e0:e0:2d:bc:43:f6:
73:38:79:be:c3:1b:ba:c5:28:67:5f:35:59:0d:e8:43:71:0d:
af:41:68:47:f0:bf:ce:18:7e:94:87:07:13:20:b9:67:1f:50:
1c:9e:1c:35:b9:70:80:e5:77:47:f2:1f:63:fb:f6:9d:e0:fd:
07:3b:c3:fd:a9:f4:ca:ce:e7:29:fa:b2:cb:f6:1b:d7:c7:ce:
10:95:43:f6:ac:15:ef:32:76:2a:b8:58:25:ce:34:92:8e:50:
eb:a0:36:4b:7f:97:d1:36:93:54:5e:3d:96:49:8b:24:41:a0:
6b:d6:cb:50:46:b7:36:31:0f:91:0a:2f:9b:89:37:93:69:79:
02:45:c9:b0:2d:e6:a5:f8:4c:95:3e:86:cb:2f:94:42:43:36:
6b:ff:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:08 2025 by rpki-client