Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: 5JLuXLj67WCk1IEq5JL0AIiAh7SAl/MAO9A3nJpY0Nw=
Subject key identifier: B6:72:A9:8D:ED:EA:FB:7B:EA:F7:67:64:36:E1:C6:A6:31:D8:5D:F1
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 019A706E7CAE51C3780E93BCE280CF43FEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 0806
Signing time: Tue 11 Nov 2025 01:01:20 +0000
Manifest this update: Tue 11 Nov 2025 01:01:20 +0000
Manifest next update: Wed 12 Nov 2025 01:01:20 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: 3lZ1E5bz4CQD+WRQ2TFOqRiw0mVa1DddqMILkdb75O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7c:ae:51:c3:78:0e:93:bc:e2:80:cf:43:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Nov 11 01:01:20 2025 GMT
Not After : Nov 12 01:01:20 2025 GMT
Subject: CN=b672a98dedeafb7beaf7676436e1c6a631d85df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:53:91:d1:73:dd:e8:c0:27:2f:dc:14:78:
60:65:1e:fe:9c:49:cf:f9:cd:c8:56:1e:3b:d1:21:
b0:56:51:ec:a0:3a:dc:1e:95:5b:93:60:3f:ea:43:
80:eb:c7:ea:9d:0e:42:d8:8d:c9:d7:8e:88:70:f3:
9d:dc:58:6e:66:c6:c5:64:98:ce:b6:55:c8:aa:f5:
e9:6d:b3:07:f1:06:70:d7:63:f4:2a:f8:f5:7b:d1:
e6:bd:05:70:8d:74:9f:ab:e4:4c:ea:37:8c:b9:10:
f3:b3:72:9c:0b:b1:ac:b4:84:47:29:07:8a:39:8c:
bc:a7:01:29:6c:ba:2a:54:97:a8:0d:a3:47:c4:c7:
b0:41:7c:d5:88:86:9c:be:91:06:96:2e:57:5a:ae:
2a:b0:5e:8d:32:a6:38:30:42:b7:b9:fe:a8:a5:f6:
4c:97:14:9c:64:d8:1e:68:d4:76:bc:8a:0d:9e:d3:
4e:c1:9d:14:c3:f7:74:20:7a:ce:07:c8:8c:d8:d6:
0e:0a:83:5b:b1:40:7b:49:7d:7f:96:5d:1c:82:b4:
55:10:cf:a1:4c:49:b3:34:c8:d7:11:d0:63:3f:89:
22:b8:3b:18:9e:67:fd:8e:5a:d0:07:27:55:ee:17:
3e:e5:f0:d5:b1:74:0d:f4:8b:70:05:1b:30:dd:7c:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:A9:8D:ED:EA:FB:7B:EA:F7:67:64:36:E1:C6:A6:31:D8:5D:F1
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:75:9c:be:05:bb:03:dc:90:53:d0:a2:fc:54:b3:a2:5b:
f3:20:ab:ea:b4:87:5b:cd:68:a1:33:ff:88:b6:09:eb:4f:79:
78:77:9f:c2:98:fb:91:58:b5:9d:74:ab:2b:4f:ea:2a:92:75:
ab:52:cb:1e:a7:4c:37:53:0d:34:a8:b4:99:2c:fb:60:bb:a0:
02:ee:2f:49:d1:98:54:9b:98:ec:56:86:c2:dc:da:bb:77:45:
db:82:aa:7f:51:fd:e5:81:15:99:3a:f2:10:0a:49:c7:1d:de:
0d:fc:e6:b7:02:f4:5f:9b:04:97:9a:e3:88:6f:f6:c3:f5:37:
f7:70:09:f7:e9:8c:cb:cc:fd:ad:1a:cc:a9:fd:73:c8:ce:8d:
6d:c0:78:6e:79:cc:c4:0d:3c:e7:67:96:7d:cd:59:d3:9a:9d:
7e:c5:39:e7:25:3e:91:60:b0:0e:f0:d1:01:6f:ad:5f:3e:c0:
cb:af:c5:a4:0d:c5:b9:33:8e:b4:71:c9:47:2c:d6:18:f6:b6:
58:5f:e3:c1:79:7c:16:7f:22:c3:0c:fe:05:b3:60:69:39:fb:
49:03:0a:b5:c2:d8:79:d7:fa:44:f4:c6:e0:40:e3:0f:db:ea:
ae:b5:5c:9b:7f:44:a9:aa:bf:57:0e:9d:20:e3:6d:7d:56:bd:
e2:8f:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client