Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: sNFqcFBlkeYKVol/2HiM7uluAv0E+6Z3y3Yr96gZdhs=
Subject key identifier: CD:50:E6:38:B9:DA:A2:2D:B6:7F:3B:88:3F:8D:42:C0:5F:D7:EB:89
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 019A71B8AABBF3FBE99F1831A0F97C2A62E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: J4OW2L22XgmTSyMAvRV9EFZ582tbbxiE7pfsur3IxrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:aa:bb:f3:fb:e9:9f:18:31:a0:f9:7c:2a:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=cd50e638b9daa22db67f3b883f8d42c05fd7eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:61:21:4b:bd:47:6c:4e:ab:7d:f0:5e:f6:a7:
20:c4:c8:de:98:d8:35:43:56:19:b8:10:81:a9:c0:
7c:57:c5:1e:7d:32:33:90:9c:fe:87:eb:20:ac:51:
83:8d:70:4a:65:b8:d8:82:92:51:8f:db:23:5c:c4:
0e:15:17:a1:4b:27:7e:19:1f:3a:3b:be:51:03:2f:
ab:65:85:20:95:81:e6:83:cc:08:a1:37:2a:b1:8a:
3a:20:c0:f6:7f:2e:01:b4:2a:d8:77:30:0b:d1:9b:
56:33:25:7e:db:cc:cf:9b:c5:2d:c2:84:fe:12:eb:
83:f4:a7:4a:a2:a4:0d:01:3d:e4:a4:d5:57:97:42:
45:8a:e0:90:0a:f8:95:d4:e7:ed:16:1a:02:af:98:
da:45:1f:b5:40:ac:74:65:c5:37:b3:ea:01:18:51:
16:e7:4a:7c:f7:01:58:fe:97:c9:ff:62:16:10:5a:
5b:9c:58:f2:57:aa:b7:60:a8:08:9e:1c:2c:45:73:
7a:b1:ed:0c:5e:69:95:e2:28:45:1c:44:48:16:77:
5b:bf:64:7b:68:bb:3e:4a:09:fa:f5:98:e8:56:54:
6b:fc:79:6a:64:26:ed:07:19:18:72:8c:f6:7f:8c:
b4:a5:bf:8e:2d:d6:1a:c3:55:3a:c3:43:b3:2e:4b:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:E6:38:B9:DA:A2:2D:B6:7F:3B:88:3F:8D:42:C0:5F:D7:EB:89
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9d:e5:ac:3b:f2:fa:8b:32:f5:2a:3c:84:1a:72:26:f4:0b:
89:ff:5b:ce:72:f7:a1:25:c7:3f:2f:76:0e:df:9b:43:06:ea:
d8:fe:7a:9b:b7:01:7d:11:72:e9:46:0d:7e:8e:a4:fc:f2:00:
05:7f:cd:ff:cb:52:65:21:d7:9d:db:48:e3:0f:0e:e5:aa:17:
79:cb:11:9c:06:ac:25:08:34:91:36:e6:5c:64:2b:18:1b:df:
45:41:36:24:f5:c1:9e:73:19:01:ce:1f:d5:57:22:21:4c:86:
d1:da:5a:b7:49:bc:3e:43:5a:f5:e8:38:d7:ef:15:4a:0c:86:
f3:0e:e4:d5:f3:0f:1a:d0:5f:86:8c:a3:1d:a5:c5:54:1e:74:
d4:85:0f:ae:cf:3b:fc:6f:59:c0:b2:c9:e2:f0:5d:5e:d9:f8:
08:c5:79:72:92:42:55:e0:f9:c1:20:e5:fe:89:e5:b5:09:a0:
7f:16:74:c1:e9:3b:bb:66:49:ef:98:83:9c:37:bd:b1:4f:82:
31:79:94:25:d5:54:3b:6d:aa:9c:d4:54:e7:93:df:c0:d1:08:
c6:37:8a:8a:17:fc:39:e6:d9:09:0b:9c:01:2f:8e:ef:71:90:
76:cc:d3:81:42:0d:35:65:a9:4e:0c:6c:ef:fe:6c:bd:d2:9a:
33:ea:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:58 2025 by rpki-client