Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: go6XIOfkrHqPYa2fhEu8+Y8Z+gGHBlKsJ4qHIyXwbpI=
Subject key identifier: 78:37:9B:2B:2C:73:43:33:7E:56:4C:81:B4:23:04:6A:83:1D:3B:D7
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019A71B7F97C364C7412C5C8E5910289CDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: y4sscCkyOMn0PEjCI2QdOwT3mJ14h1qMB4dtZbmJ/Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f9:7c:36:4c:74:12:c5:c8:e5:91:02:89:cd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=78379b2b2c7343337e564c81b423046a831d3bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:28:be:c5:1b:2d:d4:99:2c:47:6e:a1:7c:
87:66:36:13:2b:60:20:cc:4d:38:0c:5f:0c:5a:ee:
e5:f9:1a:db:cf:2d:92:df:51:25:da:7a:54:18:f5:
27:15:66:c5:6e:63:4f:64:09:c8:fa:fb:d5:48:a4:
d8:34:c7:60:a8:bf:45:d2:d6:78:d5:08:5b:c7:ea:
3e:83:8d:ba:03:93:66:76:44:71:5b:70:e6:04:07:
e9:f6:48:00:7e:6d:b5:d8:72:dc:cf:34:96:06:23:
d9:75:2f:5d:06:45:ab:5e:7f:37:5e:b0:06:c2:1e:
b7:6e:3c:b0:59:a6:15:b8:11:e0:67:dd:5e:2a:f6:
60:cb:09:08:43:91:bc:37:0c:28:ee:e1:c5:64:44:
3a:49:7c:1e:6f:2c:f2:ec:f8:fc:54:24:dd:e2:1f:
4b:17:21:02:b1:37:6a:a6:f1:13:85:72:7b:3f:d2:
87:f1:05:d2:9c:13:d1:cc:f5:68:38:ff:31:56:a0:
4f:25:63:e8:93:f4:9d:98:26:5d:d7:67:43:b2:12:
fc:13:60:d3:80:17:c7:00:d6:11:67:31:99:20:9b:
8f:71:fa:df:b6:d9:f4:ef:d0:24:d2:aa:45:a3:cc:
55:1d:3c:06:6d:b9:e4:a9:24:23:51:08:6a:24:cd:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:9B:2B:2C:73:43:33:7E:56:4C:81:B4:23:04:6A:83:1D:3B:D7
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:25:53:6f:7a:81:d0:44:24:35:8c:94:68:2d:0d:2d:4e:
43:16:63:30:05:35:e7:a8:83:bf:b7:19:ff:10:c5:35:06:c0:
1d:bc:24:e0:77:af:b7:12:f6:fb:f5:18:49:9b:b5:c9:ff:35:
b4:80:a0:96:41:f8:e3:40:b5:a1:7c:38:f8:39:66:ad:37:c9:
f6:62:b7:2a:27:18:3d:3b:ec:30:9e:76:16:1d:25:b0:7f:f6:
c7:e9:c5:37:88:df:ba:e2:65:e5:eb:01:a9:65:67:06:29:b1:
8b:84:58:81:d4:2a:ad:6a:4e:96:ff:16:46:ef:16:fd:2f:d6:
50:89:c9:36:39:f9:b4:98:32:35:75:01:ee:d6:20:d2:9f:7a:
f2:1a:0e:31:1c:09:e0:3f:20:1d:70:dd:28:98:8d:fa:fd:34:
0d:5e:31:d0:0f:01:28:1c:29:29:96:23:8a:91:43:ae:7e:d1:
5d:b3:c6:83:c9:a8:e5:24:b6:3b:aa:0d:72:78:fc:24:e3:9e:
05:3f:78:0f:7c:3c:0c:c4:a3:50:34:33:33:30:6f:f4:ea:c9:
13:d8:36:9f:7e:0e:81:0b:96:5c:97:18:bc:04:fa:3f:37:39:
8e:26:6d:74:bd:83:2d:a3:7b:a2:e3:15:6f:75:a1:3e:9a:77:
d6:0c:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:03 2025 by rpki-client