Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: pKy3N1NEyqvosuFsrSfcnxj/IXEPJ569t/0dJgs5Mek=
Subject key identifier: 25:3D:8A:14:ED:10:4C:51:E1:F8:E4:94:80:9A:4E:61:D4:F9:E9:5F
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 019A70A5305C61F82C580EDC8300A8284261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 02:01:05 +0000
Manifest this update: Tue 11 Nov 2025 02:01:05 +0000
Manifest next update: Wed 12 Nov 2025 02:01:05 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: vGCQacfGFtHjD4Ne3i5WE439mBcHCHigsbZo8uwA938=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:30:5c:61:f8:2c:58:0e:dc:83:00:a8:28:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Nov 11 02:01:05 2025 GMT
Not After : Nov 12 02:01:05 2025 GMT
Subject: CN=253d8a14ed104c51e1f8e494809a4e61d4f9e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:f1:c5:89:a0:38:46:68:ec:6e:4a:36:a0:
dc:45:4e:4d:b8:1a:c9:1b:4d:f7:74:6b:55:2c:eb:
27:3d:ac:45:e0:7e:67:2e:fa:94:3d:d6:61:57:ce:
a7:df:bc:74:20:10:e7:cf:47:31:37:0e:e4:36:46:
a9:33:c7:5a:ce:18:4f:87:8e:21:4b:10:89:b1:4f:
d8:96:43:37:8d:6a:75:eb:ab:fa:e5:9c:dd:8e:07:
75:8e:24:dc:b8:8e:1b:5f:42:25:2b:db:ab:a9:c6:
55:fa:b5:4a:c2:39:5c:ee:53:7d:e4:21:84:6a:a1:
5d:e9:01:1d:d5:2c:89:2d:95:14:60:a8:82:61:b0:
b8:0c:76:82:04:94:1e:df:c6:a6:6e:de:73:57:a0:
1e:08:df:c4:20:89:d1:07:d3:25:31:15:9b:cc:a1:
43:87:e9:e4:93:8f:03:09:ee:89:d0:20:69:84:f8:
7b:77:16:44:b0:b1:b4:90:ea:3e:db:ad:0d:d8:17:
88:b3:f6:c4:95:3c:b0:b2:d7:ec:7b:e8:52:45:c9:
dd:35:24:56:fc:72:72:6a:07:c6:a8:ff:55:ac:b2:
fe:3c:42:e7:a8:d7:54:30:36:11:20:b9:f9:fc:43:
c5:60:48:36:09:b4:04:56:dc:61:90:78:eb:cd:80:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:8A:14:ED:10:4C:51:E1:F8:E4:94:80:9A:4E:61:D4:F9:E9:5F
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:37:0c:2f:d6:b5:ec:c4:44:32:03:e5:73:58:3c:22:89:1d:
af:c0:59:36:93:c2:9c:b6:6f:0b:21:f7:86:b9:09:36:ad:4d:
aa:9a:17:69:a6:6d:08:46:e4:a6:02:b3:e8:07:16:ae:34:ea:
c5:09:70:45:ce:12:6c:79:7d:e6:93:4f:8d:82:e9:2a:82:37:
d7:a2:b2:cd:e5:b9:ba:2b:03:fa:a7:56:8c:3e:01:52:c3:de:
c3:83:fb:7d:ab:77:a0:87:a6:ca:5f:74:b0:52:fc:b5:4f:b9:
6b:ea:1b:c4:55:ef:2e:dc:6c:e9:58:57:e5:c3:0f:7f:b5:95:
db:08:4e:3e:b6:96:9a:64:0e:ea:cc:69:aa:af:ae:d3:e3:24:
70:7e:ea:d8:88:93:2e:d7:33:c6:e9:35:9e:ec:77:18:96:1b:
7d:60:db:f3:ca:38:3c:88:f5:21:69:61:1f:6b:ab:6b:76:22:
cb:1e:d9:8b:23:27:5f:d6:df:bd:7c:ba:da:82:40:fe:06:1f:
44:0b:62:8b:8a:62:f4:88:5b:d1:a3:8d:4b:b6:cf:a1:0c:ea:
97:b5:85:26:25:a8:a5:20:36:87:1e:53:80:1e:8d:f7:a8:df:
bf:89:59:d0:e1:67:85:32:75:b0:c5:a3:e6:74:4c:80:d1:1a:
48:9b:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client