Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: pNRiOz3KcVyaVbIoFzENDK1G++VMvoBlAPxc+05b1Pw=
Subject key identifier: 92:D3:F6:CD:F3:F8:C5:03:99:FD:18:C8:D6:6B:9B:49:C2:87:9D:35
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 019A725CE7BC67D45335B00B648F2107EFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: 64+5x93WmA6efBdytAGHbcRnlDVL51CvzisTkmQdnFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e7:bc:67:d4:53:35:b0:0b:64:8f:21:07:ef:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=92d3f6cdf3f8c50399fd18c8d66b9b49c2879d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:e3:b4:02:d3:14:57:51:b9:76:1c:2a:57:
32:7f:30:79:8e:2f:81:a3:b4:41:c4:f1:a9:d7:59:
bd:90:ff:80:e1:fe:1b:06:06:1f:41:39:5a:09:d8:
a5:75:5e:90:8e:7f:00:cc:4f:c6:36:f0:d7:4b:9f:
40:df:1f:3f:14:8d:d7:cd:46:3f:9a:dc:3a:91:63:
aa:f6:ef:ba:59:1f:e0:84:d2:07:31:5c:56:aa:cd:
0e:94:f1:51:6e:85:c0:2e:34:53:9c:cd:cc:bf:30:
47:95:a6:cc:6f:42:d6:04:9e:28:ee:02:d1:67:fd:
a3:2a:ec:ad:c2:e8:04:b1:98:22:06:fb:18:0d:c3:
8e:19:42:02:99:4d:75:67:0f:cd:72:c4:9a:fd:67:
8d:a5:0c:3e:f3:76:9e:b6:a7:31:42:93:66:0a:c6:
9a:21:59:ec:ba:5c:a2:55:e3:d0:a0:67:a6:50:82:
05:1e:f1:5d:c6:8b:d1:87:f1:9c:a3:39:74:05:5c:
e9:33:9f:6e:40:ff:6c:2b:0d:19:9c:81:0f:ea:31:
da:a8:85:92:79:ac:8b:a2:9a:e1:8a:56:b9:6c:98:
5e:48:4f:47:21:6b:55:77:f8:12:52:c9:75:2f:7d:
6d:0e:08:91:d5:12:81:b2:64:56:fd:24:93:8a:14:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D3:F6:CD:F3:F8:C5:03:99:FD:18:C8:D6:6B:9B:49:C2:87:9D:35
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:02:bf:0c:83:f4:1b:9e:d6:eb:1d:b0:7a:e1:b1:bb:98:
a4:29:67:06:12:3e:56:12:cf:53:a1:79:93:57:b6:e4:43:fe:
bf:d8:cd:2f:20:16:9c:0a:d5:a0:f8:d5:c3:62:fb:8f:db:70:
ec:b3:c9:2a:a7:32:fd:0f:d9:56:09:7d:26:ee:7d:da:d2:49:
27:56:cc:17:55:7e:83:c2:db:cd:19:16:37:54:a3:f8:03:35:
7a:cd:ca:b1:21:3e:06:f8:23:4e:16:5f:cf:7a:6e:73:f7:5d:
5b:8d:69:e9:1d:3e:19:f8:a1:d5:30:61:72:16:ce:9a:68:eb:
c9:e3:bb:26:5f:16:3f:3b:aa:45:7f:f4:b4:68:81:af:2f:fd:
2f:ad:03:c1:2f:08:f5:ac:6a:4e:53:89:23:b4:be:1f:df:c6:
51:21:db:c3:d6:c5:78:e9:28:74:3d:3f:f2:61:bf:84:cb:fa:
e0:a3:78:c8:20:1f:89:b9:9c:61:f6:8f:e4:27:73:df:2d:5a:
16:bd:58:ff:f0:59:33:92:0c:36:76:a7:7e:c4:7b:55:48:5b:
52:3e:e1:97:ba:d2:fb:8d:fd:0d:ec:a9:90:32:7b:3e:52:9e:
50:e3:71:90:4c:3a:64:6b:65:dd:1b:16:b0:30:87:a2:1e:10:
ed:a9:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:59 2025 by rpki-client