Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier: W9l6q7lAs1TeLZIJ/aYhNhTEPT1QrRlS/XF0VHca8p4=
Subject key identifier: A2:77:8D:02:CD:EC:85:B0:7B:7A:2F:F0:D6:02:6E:07:51:D8:39:8F
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial: 019A71EE91F6A59B79AE59B18105753C5D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: CM5iO/jjDkry3MF1Etqg4s5g9i+/NzN6Ajvr3T0Rh/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:91:f6:a5:9b:79:ae:59:b1:81:05:75:3c:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=a2778d02cdec85b07b7a2ff0d6026e0751d8398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:8d:09:7f:bd:62:1f:39:ae:09:9f:6d:a3:
0b:80:63:1d:5d:54:d9:54:37:f6:57:92:ef:b0:54:
79:f6:ea:94:63:46:e8:6a:56:67:9f:7d:ce:3f:e5:
32:27:73:89:14:44:78:7d:10:58:5e:a3:0e:93:30:
4a:fb:d2:37:12:14:ee:1b:45:2a:93:2e:8e:4d:82:
15:27:4e:0e:9f:29:da:f1:ef:5b:e0:dd:e3:d5:f2:
2a:bb:c9:94:d9:7f:90:1b:b7:20:30:4e:e7:e0:36:
0f:84:23:91:f1:14:09:e2:e1:71:30:6c:cd:a2:b2:
cd:3a:5e:b4:ff:be:cd:70:2d:e4:fe:a5:c3:71:0e:
56:9f:f2:16:1f:7e:e2:ef:32:cf:b9:0d:8f:e2:e9:
d5:9e:45:f1:af:be:26:2c:44:28:48:aa:4b:dc:c3:
ad:b2:ec:fb:ca:67:fb:02:b4:b1:27:d4:25:52:66:
a0:96:22:64:d1:d9:65:4d:5b:e5:33:95:5d:23:76:
c6:1d:12:58:8f:4b:a4:2e:c8:50:94:ec:5f:2a:42:
fc:bc:97:28:ea:2f:56:89:1c:7a:4a:12:58:44:56:
ba:2f:bd:ac:4d:b9:a1:c8:db:66:03:3a:3f:8d:ed:
37:26:7c:42:9e:6a:f2:c3:1d:61:70:30:f7:1f:db:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:8D:02:CD:EC:85:B0:7B:7A:2F:F0:D6:02:6E:07:51:D8:39:8F
X509v3 Authority Key Identifier:
keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:42:84:18:f7:d9:fe:49:85:b1:b0:8c:c7:56:02:ef:8f:30:
9c:35:23:97:56:e4:25:99:e3:9b:43:14:83:f4:c2:e6:1d:83:
66:18:58:df:e3:41:ce:20:b0:9d:ec:ea:a3:ed:19:8f:c4:b7:
51:b4:ba:cb:35:32:92:7e:17:5c:b6:9b:a5:2a:1b:dc:6e:5b:
0e:13:ae:27:03:dd:a0:0a:97:28:eb:20:6c:4f:47:25:08:de:
1f:97:74:0d:e5:13:9f:ad:91:c7:d8:15:9f:6f:53:6b:43:2f:
54:a1:2d:1d:c2:6e:2c:f0:b6:3b:d6:ee:4d:2c:21:fc:6f:6e:
bd:9c:88:e3:b6:93:99:1c:b1:82:a5:e3:31:47:9c:e6:c5:0c:
78:a7:49:16:b3:13:99:74:bf:21:1b:aa:67:a9:78:63:c2:12:
99:84:1f:dd:b6:79:ab:05:d8:a0:96:08:ff:f9:ae:49:8f:06:
85:63:75:a7:92:a7:93:af:cb:ef:42:46:07:e9:77:3b:52:c9:
3d:be:cb:18:91:c4:ae:b3:ee:ec:ec:1e:43:b3:4e:7a:7f:72:
7a:39:e7:95:23:bf:15:b7:f5:e4:2b:5a:d1:3d:f2:b9:d7:d7:
a4:30:07:8d:7a:45:bb:f7:26:7a:dc:57:33:9c:f7:26:d0:71:
c4:4c:9d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pH2pZt5rlmxgQV1PF1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2QwY2M1YmQ4NmQ1NjgzNjY2NTdhZWYwMzEwZDQ5M2E3
MTc2ZTQwHhcNMjUxMTExMDgwMDUxWhcNMjUxMTEyMDgwMDUxWjAzMTEwLwYDVQQD
EyhhMjc3OGQwMmNkZWM4NWIwN2I3YTJmZjBkNjAyNmUwNzUxZDgzOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjKNCX+9Yh85rgmfbaMLgGMdXVTZ
VDf2V5LvsFR59uqUY0boalZnn33OP+UyJ3OJFER4fRBYXqMOkzBK+9I3EhTuG0Uq
ky6OTYIVJ04Onyna8e9b4N3j1fIqu8mU2X+QG7cgME7n4DYPhCOR8RQJ4uFxMGzN
orLNOl60/77NcC3k/qXDcQ5Wn/IWH37i7zLPuQ2P4unVnkXxr74mLEQoSKpL3MOt
suz7ymf7ArSxJ9QlUmagliJk0dllTVvlM5VdI3bGHRJYj0ukLshQlOxfKkL8vJco
6i9WiRx6ShJYRFa6L72sTbmhyNtmAzo/je03JnxCnmrywx1hcDD3H9uTBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ3jQLN7IWwe3ov8NYCbgdR2DmPMB8GA1UdIwQY
MBaAFCZ9DMW9htVoNmZXrvAxDUk6cXbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGIwNzQtN2Q1Ny00NjE2LWE4NWUt
ODgwYWI3OTQ4NzI4LzEvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNGIwNzQtN2Q1Ny00NjE2LWE4NWUtODgwYWI3OTQ4NzI4
LzEvSm4wTXhiMkcxV2cyWmxldThERU5TVHB4ZHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEKEGPfZ
/kmFsbCMx1YC748wnDUjl1bkJZnjm0MUg/TC5h2DZhhY3+NBziCwnezqo+0Zj8S3
UbS6yzUykn4XXLabpSob3G5bDhOuJwPdoAqXKOsgbE9HJQjeH5d0DeUTn62Rx9gV
n29Ta0MvVKEtHcJuLPC2O9buTSwh/G9uvZyI47aTmRyxgqXjMUec5sUMeKdJFrMT
mXS/IRuqZ6l4Y8ISmYQf3bZ5qwXYoJYI//muSY8GhWN1p5Knk6/L70JGB+l3O1LJ
Pb7LGJHErrPu7OweQ7NOen9yejnnlSO/Fbf15Cta0T3yudfXpDAHjXpFu/cmetxX
M5z3JtBxxEyd9g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client