Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: cQ0OgLzSTl3BpCY2yfLcO3KAHKNoMHqmjPOPNTPoHSQ=
Subject key identifier: A3:FE:E3:2B:84:20:2A:69:DD:CF:DC:E8:B6:6D:C8:82:96:1E:C1:BE
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019A7225992DF91767C27654A7A4E04B20D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: uAQaymRq/YfRPN9Rapa7ROXtMwY1aLO9bKKwqQ4XLt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:99:2d:f9:17:67:c2:76:54:a7:a4:e0:4b:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=a3fee32b84202a69ddcfdce8b66dc882961ec1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:90:7c:5f:6d:de:41:e7:64:59:13:f1:0b:
58:b6:e9:d1:b7:da:bf:a7:e6:0c:65:00:3c:dc:00:
37:57:e5:d2:3a:9e:32:4f:3d:cf:9d:dc:49:9d:9c:
dd:13:83:4a:3c:1d:4d:2f:55:a5:98:78:c7:a0:2a:
88:19:60:99:2c:b9:73:f3:5d:57:e9:c5:ec:c5:6b:
a3:f3:9b:86:4a:70:9f:20:97:64:8e:42:25:ed:6b:
ed:ff:4a:73:1f:6a:64:ee:48:a3:55:a5:b2:76:79:
09:00:72:26:15:b8:50:83:de:95:4b:1b:50:a5:9c:
69:a9:9b:0a:12:8f:03:c2:5a:29:c4:15:11:61:61:
c4:d6:9e:83:47:23:24:b9:90:9b:77:99:e9:c3:98:
07:81:36:11:c5:2f:ae:67:eb:cf:34:c8:e7:cc:f6:
a5:52:f9:61:d9:18:bb:95:d7:9d:18:30:74:50:1d:
13:43:7d:2b:eb:ff:87:3c:c1:49:a6:9b:1d:87:af:
75:9e:55:3e:61:9f:c5:6e:7b:53:d1:53:db:f3:e7:
78:1b:4c:56:fa:76:c9:21:78:6b:2a:ac:8c:86:b1:
87:4b:e4:27:f7:52:24:b8:f4:26:72:cc:73:64:ff:
a9:2d:5b:f0:b2:93:c7:78:28:36:81:cd:d6:34:c3:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:E3:2B:84:20:2A:69:DD:CF:DC:E8:B6:6D:C8:82:96:1E:C1:BE
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ea:4f:8d:03:8d:c9:5f:48:2e:8c:31:eb:12:36:82:bd:f6:
0e:d1:f2:17:72:6f:ba:46:79:32:50:95:1a:4d:5d:0f:80:7f:
66:6a:dc:e6:d5:69:b4:d6:f6:8f:d7:39:7e:5a:1f:99:51:36:
b1:a8:e3:a9:e4:16:23:4b:4d:6e:ac:5f:ee:29:26:e6:fc:65:
e7:9a:39:33:17:ee:79:58:bb:fc:bf:d3:0c:04:92:70:09:c7:
0f:0f:73:f1:86:a1:35:e3:38:d2:4e:9b:de:cc:d5:da:7a:75:
a3:07:6e:6c:d4:7f:76:3b:ea:8a:19:6b:02:97:c8:ac:5c:17:
25:06:e8:35:0c:15:28:be:95:55:d5:78:53:9c:77:04:fe:76:
a9:59:c5:04:b2:28:cc:6d:4b:3f:ad:bc:cb:a4:65:06:d2:1b:
fc:0e:eb:80:6e:f8:06:64:b4:cb:b1:f2:bd:d0:c3:6d:53:55:
92:1e:84:d6:9f:e2:68:31:41:2d:06:63:1b:d2:d5:49:9d:6a:
3c:37:a4:79:5e:90:3f:45:21:2d:ed:fb:2e:4f:5f:ea:b3:4d:
43:bb:c5:07:70:78:e6:d7:93:49:04:90:11:ef:11:fe:56:58:
b7:b3:28:3c:c8:08:4f:a4:81:a7:da:e6:0b:9f:74:32:11:d9:
e2:f7:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client