Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: m/fiWjh/BuM/4ZdFWcuTaIbpuxhJU4D400+ijZPHLS8=
Subject key identifier: 6D:F2:12:23:4B:87:3F:1B:F1:8D:F6:FC:12:03:75:72:D2:4D:FB:47
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019A7293CFE62D9B2A172BD05D7349923500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0932
Signing time: Tue 11 Nov 2025 11:01:20 +0000
Manifest this update: Tue 11 Nov 2025 11:01:20 +0000
Manifest next update: Wed 12 Nov 2025 11:01:20 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: ewNVULZHzYa5Y8WUxsUsing3c80oP/f0PmWzkHZBaF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:cf:e6:2d:9b:2a:17:2b:d0:5d:73:49:92:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Nov 11 11:01:20 2025 GMT
Not After : Nov 12 11:01:20 2025 GMT
Subject: CN=6df212234b873f1bf18df6fc12037572d24dfb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:59:30:90:51:b2:7f:19:d3:2b:94:f3:7b:
d7:d7:30:25:2e:23:28:04:c0:fb:ca:7d:e6:e2:a7:
55:59:f7:c6:c9:70:f3:36:50:75:cc:f3:e1:8e:35:
7f:8c:5e:58:80:f7:9b:0b:26:78:49:c2:0c:9a:e1:
67:5f:5a:e9:b3:6f:d6:19:72:c2:31:aa:be:af:11:
40:69:40:93:b7:fc:e0:df:b1:8f:3f:44:c5:45:03:
ea:ba:6b:4c:80:7a:9c:de:d5:a5:f6:37:d5:3a:3b:
ad:da:d8:69:c8:ec:1d:e2:5c:e9:d3:61:7e:c0:e4:
d3:8c:e7:dc:0d:ab:e8:67:22:b3:05:f3:87:39:aa:
27:ba:fe:a1:2f:59:f1:c2:60:7d:e8:4a:ef:b1:ce:
fd:14:05:f0:b0:cb:2b:49:96:37:17:7f:3e:e7:c1:
c9:a1:8e:00:d9:26:c6:91:62:42:84:95:27:19:c9:
c2:9b:3d:8c:5e:37:3c:17:9e:73:f4:24:7c:6b:0a:
2e:20:61:5b:ac:c3:57:59:95:d5:60:c7:47:23:4d:
3c:16:c3:79:65:ba:c3:0b:25:fb:eb:76:52:3f:7e:
3d:12:fb:6f:71:ee:f2:39:ff:dd:46:2d:fd:86:bc:
5c:98:ae:49:1a:16:19:66:a3:3c:62:6f:92:90:da:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F2:12:23:4B:87:3F:1B:F1:8D:F6:FC:12:03:75:72:D2:4D:FB:47
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f7:88:11:f5:14:24:4b:7a:1c:27:8a:78:de:ae:77:25:a0:
b9:4a:d8:e0:21:9e:36:eb:2e:59:d6:be:16:bf:fb:45:0d:84:
d0:ec:4f:59:76:b7:ba:fe:5b:f8:64:10:58:f7:c3:43:42:b8:
40:05:52:0b:b7:37:8e:a6:b5:12:19:68:db:14:e8:1c:a5:a8:
6e:ef:98:a9:b9:b0:dc:ed:02:fc:0d:0e:b8:61:24:91:06:48:
ba:cd:4c:2b:9a:a4:5d:48:e2:ce:a5:8a:5d:27:63:af:a3:71:
4a:e7:21:8f:dc:a1:57:c0:47:2c:6a:46:a9:51:6b:eb:33:d6:
6e:d9:ba:7b:06:b7:0c:48:07:77:4d:18:b0:45:66:1d:80:b3:
ee:bb:7c:92:65:58:4d:96:f1:cb:29:cd:03:66:4a:8b:1a:36:
f3:e6:82:36:0d:fc:11:34:21:8f:da:ad:a8:86:d3:0a:53:10:
c2:49:9a:c4:ae:41:c5:1f:17:81:f7:65:62:2e:e0:6d:3e:ec:
68:da:1e:64:42:5d:2c:59:d8:9e:d9:fc:36:b9:35:95:e5:16:
0f:30:e4:0e:0d:b6:68:72:2a:e7:b9:24:02:e5:47:4a:b2:8c:
c5:d0:93:d3:87:c5:3c:ef:bf:70:c1:03:ac:42:8f:5f:81:e0:
1f:1c:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:51 2025 by rpki-client