Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: yrGqrqLa58l7VZBl3gIpBJc4Vk2vG55lAQelf4gaUL0=
Subject key identifier: CA:A4:CB:A6:50:9F:AB:0C:A6:C8:69:3D:44:81:7E:19:4A:5D:5D:28
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 019A722637C278A1C1D0388F13590B873520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0D0B
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: fvGjekZHkvZK2tA205z3rKv/xVzlZDJU4awRTKvAXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:37:c2:78:a1:c1:d0:38:8f:13:59:0b:87:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=caa4cba6509fab0ca6c8693d44817e194a5d5d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:0c:37:e0:0d:67:a0:4b:64:90:d6:7c:d6:
f8:8f:0e:c8:32:6a:27:62:5b:1a:df:e1:9d:66:e5:
31:1e:bf:18:a5:a1:5f:a5:d7:f5:ea:14:25:02:30:
23:cb:c9:b6:49:6a:5e:c6:6d:2a:e4:e9:86:dd:a1:
e1:e6:bb:5d:0a:10:b9:d3:75:4a:ff:c6:72:db:e2:
09:9a:02:24:78:1e:f7:85:90:b0:f5:02:ac:b1:b8:
68:6e:ca:3c:99:2f:d8:bd:30:83:11:dd:ea:d8:3c:
a5:34:c2:fd:73:25:46:a0:6e:7f:67:d5:4d:42:d5:
e6:ae:54:dd:0b:d0:d8:0d:f3:75:d0:82:37:ff:af:
73:2a:5c:ae:6f:6b:86:bd:93:e7:d7:9d:c2:ac:20:
86:15:9d:8f:be:01:ef:19:4c:e6:40:4b:d0:d5:36:
8c:8a:86:ec:3f:e0:d7:31:70:16:d9:ad:37:78:7a:
57:35:c0:c7:07:8f:fe:6b:ee:2d:a1:8e:cd:dd:88:
cd:1c:30:87:11:e8:27:e8:46:f4:be:09:64:97:28:
96:3a:1e:86:6c:6c:f7:b6:8d:f0:01:9b:af:0f:c7:
09:5d:55:b1:8d:d3:a9:fd:bc:69:ff:91:cd:b4:a3:
e3:26:c2:b3:90:4e:35:c2:21:bf:28:94:6b:92:78:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:CB:A6:50:9F:AB:0C:A6:C8:69:3D:44:81:7E:19:4A:5D:5D:28
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:21:34:00:71:f1:75:e1:78:c4:e6:2f:b4:73:56:98:08:59:
e1:f3:fc:ea:fe:3d:d6:3c:2d:76:2e:bb:c7:c0:93:e0:ce:5a:
27:f4:77:8c:3f:58:07:6b:d3:75:00:9e:ce:c1:ed:ea:a3:55:
bf:2d:ad:d6:b7:54:0d:d5:c3:ce:f9:3d:84:74:5e:d1:cc:11:
61:95:3d:17:23:ad:2d:b8:f1:df:fa:b2:de:b0:ac:5d:54:23:
09:b5:9f:a6:ec:e8:9b:f7:34:76:4a:c2:ae:59:2d:ee:8b:53:
c7:ed:b3:84:a9:ec:eb:1d:7c:38:61:81:3d:f5:55:30:00:01:
a7:0e:47:36:ca:04:4b:b9:7b:93:cb:ef:c7:a9:09:5e:e0:1a:
e5:59:2b:16:d8:4d:63:92:36:12:f8:36:ad:4a:a2:4b:61:d5:
a1:7b:8f:d5:ff:b6:27:4f:80:e1:0c:4a:57:39:ab:28:6d:c6:
92:88:03:89:d3:02:ed:f0:b6:f4:8a:0a:cf:4e:c8:7f:fb:d9:
a4:b3:30:45:c8:ae:e1:4b:3b:62:f4:72:00:a6:05:4c:7b:c7:
9a:60:3d:4c:16:af:72:2d:18:68:da:83:28:4f:2a:44:24:7f:
63:0e:0f:cb:8b:5f:80:fc:1f:85:f5:e2:7b:0a:50:91:d5:06:
f4:42:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:56 2025 by rpki-client