Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: qCrISzUunWcoQsKfQ50I4rDA0qKb8Xm2cPtWJ5H9ZNw=
Subject key identifier: 48:F1:B0:1D:DA:D8:AC:9F:B1:BD:C7:81:AE:3B:F8:E4:FE:F6:42:A7
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019A70A51799FA4733C2EABAB010D594C414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 082D
Signing time: Tue 11 Nov 2025 02:00:58 +0000
Manifest this update: Tue 11 Nov 2025 02:00:58 +0000
Manifest next update: Wed 12 Nov 2025 02:00:58 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: zcUL8CyeQItY+s2T4T4tRl9GyKaPkSNdgM0hRmW6KrM=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:17:99:fa:47:33:c2:ea:ba:b0:10:d5:94:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Nov 11 02:00:58 2025 GMT
Not After : Nov 12 02:00:58 2025 GMT
Subject: CN=48f1b01ddad8ac9fb1bdc781ae3bf8e4fef642a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:30:dc:00:ee:07:68:e6:de:c3:7d:e5:d5:
74:b6:03:a3:13:05:99:48:4c:88:b6:9b:e8:9e:d9:
16:1d:0a:c2:70:a5:b9:0e:09:e8:63:61:96:c1:3c:
03:c8:d8:f6:10:64:14:48:82:3e:a4:74:60:d6:9f:
55:09:67:3c:6e:1c:61:d2:15:e1:f6:4e:9a:8e:58:
ec:f2:1d:f5:48:82:9d:51:2f:84:aa:9b:cd:a9:46:
d6:55:ed:a4:45:93:c0:29:23:18:a6:9d:5b:05:1f:
1e:24:82:73:38:75:10:43:34:ff:0d:6f:b3:b9:dc:
c6:b5:0d:52:0f:bf:74:b0:73:b3:50:fd:18:29:2d:
72:3c:2b:d8:54:38:3d:57:86:d1:fa:e2:b8:71:eb:
a8:1c:91:1b:41:42:09:ab:40:3c:c3:e9:56:ee:25:
c3:46:30:f5:a8:5b:65:d5:3f:63:db:79:1d:fc:e8:
9c:d8:c8:60:62:90:57:df:d3:24:aa:fc:32:0c:7e:
c7:f4:a2:26:46:19:ec:41:f8:3a:ed:67:fb:c8:53:
5b:2b:c9:07:5a:80:c8:6f:1c:c1:d7:3b:61:1e:84:
3f:93:14:a8:e8:60:43:6b:6d:1c:08:07:48:32:e3:
fc:ee:98:b1:a0:16:ae:9e:5a:e3:bd:78:44:49:24:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:B0:1D:DA:D8:AC:9F:B1:BD:C7:81:AE:3B:F8:E4:FE:F6:42:A7
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b6:67:7b:9b:eb:bb:32:af:75:13:35:e0:1c:8e:d4:2f:5b:
09:a8:76:2f:da:f3:cb:50:64:9a:03:56:1a:11:15:2d:e9:d9:
8a:0d:70:56:4e:98:fa:ff:c4:6f:bd:fb:ae:e9:29:af:cb:b2:
eb:86:a2:95:cc:c6:9c:4a:50:da:8b:22:d7:70:99:ec:f7:b4:
9d:5b:13:7c:18:2b:86:73:25:6d:11:d6:99:17:05:ad:54:8c:
b8:1c:88:ac:f5:98:9e:36:e6:55:91:17:cf:ff:0c:c4:61:9a:
3d:d8:ee:e2:3e:22:c3:9c:98:f1:b2:10:f9:d1:c7:35:0d:f3:
61:20:c9:95:c9:bf:2f:4f:ca:1d:01:8d:f2:9b:9f:1e:24:3f:
51:f1:bc:15:f0:81:92:f9:2b:38:35:84:81:0b:95:c5:5a:af:
10:46:cb:a1:e3:55:2f:fb:b1:3f:29:ab:43:d4:1f:f9:02:36:
10:86:45:f8:a4:0c:6b:50:1b:3d:a7:05:ff:3c:05:de:d0:64:
64:7a:b1:27:a1:dc:0b:6c:56:42:11:14:55:60:a7:f1:1a:7f:
ae:a3:68:93:ce:33:ba:d9:77:15:cb:7a:ea:b6:df:7a:59:75:
24:af:c6:53:1a:12:b1:45:3b:e5:f7:36:e0:c4:1d:34:80:2a:
fb:0b:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:17 2025 by rpki-client