Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: 0RePs0FpoTQOB0hqwy5pVpygrkQ/NTRu4rEIaNcnZ0U=
Subject key identifier: 5C:BE:BB:4B:E3:A5:25:31:94:60:2F:62:63:43:D3:D7:AA:65:43:88
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019A71B92FD02D1444E0A9DE32F73E0E10C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 06C9
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: Y3YkXCgHjpeeolGVNXUY063Qi3+YM8sn2vZQdjQfF0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:d0:2d:14:44:e0:a9:de:32:f7:3e:0e:10:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=5cbebb4be3a5253194602f626343d3d7aa654388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:4c:8f:14:26:76:73:4d:6e:82:3d:74:f6:
b6:bc:b5:5c:ac:f3:3a:ec:e4:6a:f5:d5:b4:3d:8f:
ce:3f:65:3c:f0:f7:ed:07:a7:10:29:9a:3d:15:af:
1b:6f:64:66:95:79:df:19:05:bc:08:e2:8d:24:06:
03:8e:27:e5:a5:9f:0c:21:ad:74:20:13:46:96:ec:
0e:a6:7d:7f:ed:d7:9a:c5:3a:d5:49:c9:c2:ae:9c:
2c:7a:56:e0:ea:0f:d4:4a:9e:a9:52:e5:08:09:35:
bd:5b:12:49:2d:b1:53:8b:36:70:73:9e:c9:5f:60:
c7:9c:37:8c:16:d6:b1:fb:85:60:35:e2:03:66:d2:
c6:dc:26:9f:34:a2:fd:b4:02:32:12:c1:31:cd:56:
0d:2f:b8:f4:22:0e:8e:d5:97:3f:35:87:b9:ed:a4:
98:f9:35:01:17:ec:a7:e0:28:33:5b:19:74:d6:44:
60:de:df:08:fd:9b:3c:55:a8:4a:48:da:f4:54:60:
d7:6a:04:10:3a:08:a7:fa:6c:29:9a:e0:10:1a:bb:
3b:c4:5f:1d:c6:67:ca:61:ed:10:9a:68:9a:a0:40:
fb:df:e8:65:da:d4:6f:aa:73:69:1c:90:e6:4c:60:
9b:63:dc:97:79:a5:b5:29:95:28:0a:49:49:22:8e:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:BB:4B:E3:A5:25:31:94:60:2F:62:63:43:D3:D7:AA:65:43:88
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:b8:9e:ea:af:e9:3e:41:c2:be:65:17:35:7b:50:4e:07:
68:bd:75:90:16:97:b6:f4:cf:0a:64:88:33:75:f3:f0:46:a3:
6a:3b:10:67:92:5d:f2:88:6b:c0:c5:ac:ae:57:f8:8b:8e:da:
06:d6:b6:da:67:ac:e6:37:5a:dc:64:36:4b:82:62:d7:1b:43:
09:ab:94:11:08:54:48:bc:86:4d:e0:4c:69:2b:43:7a:d2:93:
a5:0f:b9:16:e3:e6:73:a5:e2:98:73:26:68:54:c8:a1:6b:3d:
41:fd:dc:02:fe:46:01:92:6a:74:44:6b:62:8a:12:25:d9:93:
5c:9d:50:e7:45:63:59:d0:bd:a0:3b:23:56:2f:c0:12:8b:c5:
ed:ad:27:6c:ad:60:36:73:42:28:ae:d4:f4:5c:42:0d:99:be:
c6:60:4e:0d:87:c9:6b:f9:d6:5d:5a:c7:8c:a5:e5:65:c0:87:
19:66:9d:4a:c4:88:50:7e:4a:b7:c8:53:48:c8:2e:82:c9:94:
3a:97:0a:71:a8:80:dc:a2:45:d9:4e:a5:27:78:3b:4f:94:3b:
ca:0c:6f:38:56:da:1c:bd:72:85:74:61:a3:ca:b9:92:22:ad:
aa:08:2b:41:b4:75:73:03:84:6a:24:fe:87:92:43:f4:10:9c:
3e:92:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:52 2025 by rpki-client