Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File: mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier: vHPwWXrKutaVOMa6J501rK4la4AomOEd6fZVYtL35iw=
Subject key identifier: 34:F7:87:38:CB:38:50:AD:F3:48:9C:44:73:E3:79:12:10:C2:FC:95
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer: /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial: 019A72266C35CA809D785C47B29D307DB096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: Pdsb3nU8ZxKKH2rycpgvYI6MEixjjfOLnbq/9VngVSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:35:ca:80:9d:78:5c:47:b2:9d:30:7d:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=34f78738cb3850adf3489c4473e3791210c2fc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:61:f9:e4:ec:df:8d:26:16:05:82:a7:92:
96:7e:3c:d8:7e:47:95:aa:16:47:6e:48:94:4b:ec:
91:c4:47:ed:b4:5a:20:73:d5:24:3f:d9:4b:50:ca:
c6:dc:a3:7c:1e:fa:2e:50:31:f3:5c:ad:a2:95:4c:
5f:02:d1:9f:ad:4e:15:60:35:ac:ec:e4:2c:19:64:
be:69:dc:2a:b9:ff:22:5e:c4:59:5d:8a:ce:b8:ef:
15:08:0d:c5:44:c6:47:c5:65:9a:1b:22:d6:ab:4c:
fa:6c:db:2a:44:ad:b0:8a:91:d4:b9:ac:e6:38:b8:
73:87:83:38:b0:23:99:0f:b6:40:0f:cb:cd:f4:3c:
fb:5a:0a:94:58:da:f9:c3:8f:07:ab:fa:ce:90:ad:
3f:fc:c2:e5:6e:1e:32:5c:4b:20:33:db:69:8d:2c:
b9:d6:f5:8b:ae:db:40:6d:04:a7:ac:c4:3c:37:69:
e2:71:4d:c3:40:97:1d:c0:b8:e9:71:35:c6:08:f3:
ae:84:66:c1:e9:29:cf:4c:a9:d4:8a:10:06:b1:25:
ec:dd:b5:46:86:73:a2:6b:d4:3e:69:6f:e1:af:e5:
ef:05:49:46:cf:68:66:e1:57:44:02:4a:25:07:2b:
66:b1:68:f3:3c:4b:f2:eb:d5:6a:4c:3f:d8:10:c7:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:87:38:CB:38:50:AD:F3:48:9C:44:73:E3:79:12:10:C2:FC:95
X509v3 Authority Key Identifier:
keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:23:1e:b5:73:7f:df:0a:04:00:b8:8e:10:fa:60:e3:e8:
23:be:cf:f4:40:12:6c:c0:cb:16:61:7b:2b:6b:d0:c5:90:74:
3f:32:0e:db:7f:02:f3:c0:be:63:b8:77:92:e4:5f:ea:16:21:
2e:8a:99:0f:c7:7c:78:aa:b4:31:ef:d9:5d:2d:50:df:07:9d:
79:b5:19:63:67:e1:57:28:64:93:e8:45:ed:f4:4f:ed:89:0c:
47:7b:30:e4:7b:ec:cc:8f:f7:2e:29:66:0a:3f:c3:1d:d4:ca:
ac:aa:cf:57:02:b4:98:4c:d9:62:c1:d7:93:b1:ef:09:66:d8:
56:a2:75:80:0e:f6:9f:ec:cd:5c:5e:a9:c3:3c:60:53:29:6b:
0c:f2:4c:a6:7e:e4:d1:16:62:b9:6e:7c:89:1e:38:fd:1d:2a:
58:86:24:8f:16:a0:88:9e:27:14:ce:16:14:35:9a:a8:8e:67:
e5:13:db:dd:96:cd:de:72:a3:26:21:b6:01:f7:81:ff:0e:03:
ea:24:2d:66:33:88:73:40:61:60:7d:10:b0:1a:5b:49:3f:66:
35:97:7f:90:e0:27:54:ea:3d:88:8c:88:87:7a:85:2e:4d:f3:
7d:f9:2e:25:4e:7f:7c:40:01:47:11:42:50:b5:7f:e8:e7:2f:
be:28:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client