Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: 5ysPaNaquSuk2XKGf4aGkTuFz7cLu6l+MqcFl8Xysl4=
Subject key identifier: D8:9B:49:E9:E0:47:97:C0:A8:75:24:AD:F0:EF:0E:4A:9A:3A:3E:04
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019A729348AEB366B4B966A2F168BC5DC075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 16ED
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: cjGQLaA/9vIUqZRnFjwUn3QuwgWbV3rOUyTSQv9KplY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:48:ae:b3:66:b4:b9:66:a2:f1:68:bc:5d:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=d89b49e9e04797c0a87524adf0ef0e4a9a3a3e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:f6:34:44:d4:26:fe:27:d2:98:c1:2a:95:
df:07:2e:d2:93:47:5d:3f:83:cf:15:ad:89:43:a2:
d0:48:4f:09:55:46:b5:0f:47:ee:67:45:51:dc:ae:
78:f9:a1:06:e2:73:24:a2:cb:52:47:d5:12:2f:1d:
7b:1f:bc:fa:ef:e6:1c:ed:fc:e6:09:c7:f9:89:da:
9b:88:13:a0:1b:55:ce:8d:25:1c:64:9a:fb:b5:aa:
57:8f:90:1c:62:0d:44:f4:39:46:0f:d2:56:9d:30:
01:d9:2e:b8:ef:21:a0:bf:09:8e:41:9d:53:8d:59:
8e:6c:87:a4:e1:09:a3:3a:64:8c:4f:a1:68:47:a1:
c4:01:2c:60:9f:6c:92:fb:f0:ed:7a:81:93:60:9b:
5f:ff:3a:00:da:a0:2c:90:91:67:ff:46:b0:22:23:
4f:84:2c:3c:91:c6:b5:15:e1:06:37:5b:4b:82:04:
da:24:1c:c6:e0:06:74:4d:3f:87:e5:db:d2:48:be:
59:9f:b2:1e:0c:ec:5f:a6:14:01:77:b9:3a:7a:c7:
59:50:18:55:a9:32:fd:ff:1e:15:61:02:78:98:af:
94:f6:f2:3c:da:97:36:28:fe:0e:ab:b3:cf:11:4c:
66:6b:86:c7:51:40:9c:fe:ec:56:3b:6c:71:6d:5c:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9B:49:E9:E0:47:97:C0:A8:75:24:AD:F0:EF:0E:4A:9A:3A:3E:04
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a7:4b:d4:99:f2:24:c1:66:90:a2:f1:1a:0b:b4:39:44:d7:
b4:35:4a:1c:1f:9c:87:06:9e:65:c9:e3:d7:e1:08:52:d5:44:
1c:7f:00:d2:ed:5e:77:b0:f7:f5:bd:db:74:a0:0b:97:4b:a3:
4a:9f:71:40:bf:51:36:72:c3:f7:49:3d:90:20:d2:99:1f:44:
fa:21:ce:a1:09:64:b3:ee:3d:e7:a3:e4:b2:f8:2b:b1:94:5d:
b7:5c:51:4c:30:0f:c9:df:7d:a9:fa:6f:8a:0f:d6:26:37:fb:
d8:f7:9d:bf:7f:5c:32:7f:24:14:8c:a5:64:36:41:1b:36:b7:
c8:8e:ff:66:4d:d1:32:81:37:02:7e:91:b4:82:cc:f5:9e:9b:
f8:25:c3:20:df:3f:53:20:ba:10:61:9b:b5:f1:9e:0f:a1:bc:
f7:ba:30:d8:cf:0c:cd:06:5d:f4:64:2d:7c:b7:70:d7:54:fc:
8f:91:3e:2c:a1:40:28:c1:ab:42:eb:14:d3:23:4c:51:88:bd:
9b:ef:8e:66:33:00:98:6e:bc:69:97:ac:76:c1:04:6e:72:b8:
1e:af:b1:e0:9e:4e:36:fb:8a:86:6b:c8:0a:31:19:39:f5:9d:
d2:d4:30:c5:74:00:fd:ea:54:d5:5e:dc:c7:3a:9a:7e:b6:50:
0d:12:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:36 2025 by rpki-client