Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: HHvkEJMbD7yFapMSuirJNxeLBp8z8k1bpMDkK8l98bM=
Subject key identifier: 1E:A9:87:E9:2E:70:23:AA:59:16:29:93:DB:A5:A6:36:0F:C4:1B:FD
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019A706E14AFD0A23964824D6BAA9EB24A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: ZNCH91RLjugHARYFM3fezbKy37SsqRtJbRBgbm8l3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:14:af:d0:a2:39:64:82:4d:6b:aa:9e:b2:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=1ea987e92e7023aa59162993dba5a6360fc41bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:86:10:df:f0:e1:e8:19:65:cd:91:7f:42:
7b:ec:c4:b1:33:1a:69:9b:4c:97:5e:d0:9e:08:7c:
cb:39:e7:60:0f:5c:f6:01:7d:05:4e:b9:8a:5e:71:
c2:a1:8b:b8:df:30:f0:bd:8a:2e:67:ca:57:37:6f:
e4:ed:b1:c5:98:3e:e2:9a:a8:83:0d:78:37:e2:de:
88:0d:ea:3c:6f:b1:bf:d7:ad:8f:5b:e2:71:16:68:
f7:dc:37:70:e5:f3:a2:ed:c9:12:8b:85:b0:8e:ff:
81:f9:e0:74:f4:43:a4:c5:8a:68:0f:52:70:d3:5e:
d0:b2:0c:21:82:d7:19:22:90:06:26:4d:65:ac:c5:
32:25:c8:79:c5:d5:30:a0:d8:7b:29:d4:d3:f9:ab:
91:86:45:f1:35:b5:ef:2f:16:b1:33:0b:08:32:cb:
f0:80:46:1e:47:c3:73:a9:09:5e:26:09:6d:68:f9:
cb:5c:e5:37:b7:53:fc:12:6b:c9:84:76:8a:ba:4f:
50:51:8f:4c:d1:d3:a7:db:b5:3c:4e:58:9c:b3:b6:
6a:a8:91:67:cb:97:17:b2:e0:8f:77:49:f6:4d:34:
47:36:c9:58:0c:f1:34:38:03:7c:25:86:16:3e:97:
5b:12:87:6a:06:ba:77:24:d2:08:ba:da:23:2a:1b:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A9:87:E9:2E:70:23:AA:59:16:29:93:DB:A5:A6:36:0F:C4:1B:FD
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:64:0b:da:93:e2:5a:e0:57:6d:c6:98:78:eb:6e:87:0a:86:
01:93:2f:3e:06:a7:80:7e:09:1f:ad:3a:a7:aa:7e:b5:34:56:
b4:61:9b:d3:0e:25:c7:17:4c:5c:2d:f9:ee:16:07:fd:61:a2:
1c:b6:70:57:27:7a:b3:fc:76:8d:02:bc:7b:6d:19:a4:8b:5d:
3f:40:2b:4f:55:de:02:aa:fc:98:8e:53:ef:a0:44:8c:ef:fe:
2c:c0:07:88:29:18:69:d9:eb:e9:1d:77:40:db:33:a9:db:1d:
d7:2a:cb:69:1a:31:b0:4e:a8:0c:25:19:5c:28:bc:71:63:8d:
5f:a8:d3:e2:ef:ad:40:60:c5:0b:42:99:cd:b7:54:7f:13:76:
96:f4:e0:df:65:c6:4f:09:17:65:b2:42:4a:4b:11:51:29:19:
80:ca:9f:2f:a7:40:92:88:b3:10:df:9f:f1:ee:2a:da:d5:e1:
79:c9:f0:d7:52:ca:88:51:1d:25:7d:a3:95:a7:bf:5d:af:f6:
09:0d:67:2a:2d:1a:c8:e6:85:1b:bd:4f:6a:6e:8a:3a:57:98:
68:fb:2a:29:16:83:7a:df:6c:10:95:28:98:a7:be:b9:f4:89:
db:a9:e9:e5:d6:f5:70:e0:2d:2b:1b:50:78:71:07:89:0d:a7:
f2:e7:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:40 2025 by rpki-client