
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier: nsxGMM0VIFY91DYGe6BD+jqFLEIM6aKFcCfbkAPVGW4=
Subject key identifier: 0B:A4:AC:2C:F1:F7:CF:A5:0E:6D:30:3E:B3:2F:F5:B6:91:3C:C5:8C
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial: 019921E784602A1ED51B0627CA45FC0BFCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number: 03C1
Signing time: Sun 07 Sep 2025 02:00:44 +0000
Manifest this update: Sun 07 Sep 2025 02:00:44 +0000
Manifest next update: Mon 08 Sep 2025 02:00:44 +0000
Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: +HCrMFafO8nwJFWZ84VXhOhoAcQ2ulEBXBCLuvjTgN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:84:60:2a:1e:d5:1b:06:27:ca:45:fc:0b:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Validity
Not Before: Sep 7 02:00:44 2025 GMT
Not After : Sep 8 02:00:44 2025 GMT
Subject: CN=0ba4ac2cf1f7cfa50e6d303eb32ff5b6913cc58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:60:33:63:e8:48:2e:3e:73:24:64:bb:82:
1e:5d:c6:79:ad:5b:2a:1b:30:b8:39:0c:97:26:0a:
bd:b5:38:e0:73:31:3c:db:6a:f7:77:0f:21:2c:34:
dd:8c:df:68:69:30:6a:1f:9e:96:f6:99:4d:13:54:
87:95:e4:48:7a:31:39:4d:68:99:16:b1:d8:4e:ca:
10:bd:1f:cb:a8:15:5e:db:6e:8e:09:54:51:65:76:
69:ae:fa:df:da:54:89:c8:08:db:10:76:07:d9:69:
f3:b5:97:cc:28:bc:ed:96:aa:4b:f6:61:f5:37:e2:
33:0c:77:15:f5:77:1f:41:aa:a6:6c:00:93:82:1e:
69:81:70:e3:d2:a2:48:42:9e:f7:46:f6:e9:11:65:
7f:61:62:85:9c:6d:3d:a5:ce:dc:ea:65:74:18:61:
a5:c9:f9:6c:15:b2:35:31:60:03:1b:9c:17:8f:e7:
f3:a4:70:47:17:f6:06:0e:52:db:07:56:d4:de:56:
c1:a2:57:00:76:d0:39:f2:c0:2e:6e:6d:1e:8b:55:
32:73:61:d4:48:d9:86:3d:30:c5:a5:fa:24:56:7d:
15:be:18:44:f4:56:2b:15:2d:6c:72:9f:70:f7:5f:
86:9d:f2:64:da:80:7d:84:19:51:7e:42:d2:6c:73:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:AC:2C:F1:F7:CF:A5:0E:6D:30:3E:B3:2F:F5:B6:91:3C:C5:8C
X509v3 Authority Key Identifier:
keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:f7:7c:35:ea:c4:07:a9:60:21:da:a5:64:f1:b0:0c:84:
67:2a:1b:e1:60:9e:8e:97:33:b4:09:81:29:f5:7a:54:a1:f7:
19:40:90:5e:9c:d3:87:c3:13:dd:79:43:ea:da:27:2a:e7:9d:
cf:b9:96:55:23:bd:bd:0f:c5:98:f1:9f:db:f7:1f:69:cb:86:
c3:37:3d:38:09:d5:29:af:0c:c3:04:34:6d:43:90:f5:d7:ef:
23:c0:89:ba:c6:ab:cb:bd:f9:b2:79:c2:95:78:7a:30:66:04:
32:54:96:62:67:05:e8:82:6f:ea:f2:67:2b:2c:d7:0f:34:30:
e0:c5:5f:6e:48:36:c3:32:54:3a:2f:6f:6a:d3:52:0d:13:68:
f4:75:7b:c8:8a:80:07:d1:66:4d:8a:df:c1:c2:0b:e9:4f:4e:
aa:20:e3:a7:74:c6:11:7d:7e:e4:06:28:e1:f1:46:0c:f7:f7:
14:e9:5d:b9:cf:fd:4b:18:5a:d6:8e:d1:99:8d:14:6e:12:b8:
39:4b:cd:f4:cf:27:10:50:5b:56:54:25:8e:3f:4f:22:33:9b:
89:80:65:b0:50:8b:9b:66:75:57:33:f0:f5:fe:03:53:e7:f1:
40:e6:05:75:68:06:37:ec:47:99:ce:d6:02:e1:ce:e3:ec:4c:
fc:78:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:18 2025 by rpki-client