Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: tjHcaGmjB/7vQbjaOfH6GOX5xOYE5lFVfTGJYUaJnx8=
Subject key identifier: 5D:56:B0:4F:27:56:D6:C8:8B:D4:E7:AC:F3:9A:2E:10:6A:BF:73:6D
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019A73A65F66893F29C1EED2CF80171FEB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0CC8
Signing time: Tue 11 Nov 2025 16:01:14 +0000
Manifest this update: Tue 11 Nov 2025 16:01:14 +0000
Manifest next update: Wed 12 Nov 2025 16:01:14 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: rTTQglzCo2LOLTsYsygxCzBloAgTfWLMx6dArr0XTIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:5f:66:89:3f:29:c1:ee:d2:cf:80:17:1f:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Nov 11 16:01:14 2025 GMT
Not After : Nov 12 16:01:14 2025 GMT
Subject: CN=5d56b04f2756d6c88bd4e7acf39a2e106abf736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:88:fc:32:a9:a3:8d:3f:ac:d0:0b:28:3a:
ca:2b:5f:c8:42:0e:cf:0b:2a:b3:e2:bf:a0:31:c0:
13:20:9c:6d:c7:57:e7:22:5b:d9:ad:f4:7a:01:cf:
d0:84:12:4c:f9:09:a8:a4:46:b7:a7:91:74:b2:b0:
65:41:6c:f9:fc:f1:91:ff:d5:6b:8c:4a:36:2b:26:
87:2c:84:3e:6a:b8:1a:66:83:bb:5c:95:87:e5:0f:
2b:b8:9f:22:b1:0c:9f:a5:a5:d9:7c:56:da:75:d2:
bb:e1:3d:d1:12:99:43:c2:f9:5d:28:f4:f5:83:05:
84:3b:51:26:44:1f:e3:e8:ad:9f:1a:10:cb:d3:cb:
59:06:d1:71:34:af:b2:8f:49:e7:52:e0:e7:ce:4c:
4f:0d:45:0d:ae:d6:7c:db:e8:55:6b:31:a2:5c:71:
ca:27:49:43:ba:3a:ae:8b:ff:c5:5f:79:2b:39:f5:
b3:b2:da:98:e9:8f:e3:92:b0:ee:06:da:f6:e0:bc:
4d:3e:01:9e:87:14:c2:32:84:23:4c:3e:55:5a:6b:
06:38:1e:60:32:98:03:1c:d7:e8:c8:96:25:09:5d:
32:1f:2a:5a:ed:fe:18:7f:77:72:cb:3e:ff:c6:c7:
e9:a2:bd:62:69:ec:a0:60:eb:7b:2b:b6:e5:57:60:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:B0:4F:27:56:D6:C8:8B:D4:E7:AC:F3:9A:2E:10:6A:BF:73:6D
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:3b:ba:f8:c3:30:fd:69:ff:46:ef:ad:9a:1a:4d:e8:2c:
7e:1c:e5:8c:53:e1:ad:32:8d:8e:7c:cc:eb:c7:3a:c8:df:bb:
cd:71:68:a3:c1:40:12:64:63:ad:ea:f4:4e:33:0d:9d:17:e9:
59:d8:e1:e9:5d:7f:cc:a2:78:3e:05:5f:57:03:f3:21:7b:b0:
39:39:70:12:44:29:b7:bb:b3:8e:c3:f2:34:6f:08:d4:d2:72:
80:e2:b7:7a:a4:56:a9:b2:57:3e:35:be:ad:68:b7:52:95:04:
83:1b:4f:c1:be:b7:51:bf:6d:53:2b:64:55:31:ff:23:fe:43:
ff:99:13:33:0f:1e:a5:58:1d:2d:a4:fc:8f:d9:d7:79:60:36:
4b:78:12:6e:43:76:83:7f:3d:cb:ff:31:5d:62:9a:62:ad:f6:
5b:11:c7:58:79:c7:cb:87:95:11:70:a6:cc:65:12:da:66:8f:
4a:5c:8a:dc:ff:97:3e:8c:19:00:1f:00:6d:a6:59:a5:e0:41:
a9:d8:77:3c:3b:c1:b5:a4:5d:5d:45:8d:dc:a4:3c:c5:11:99:
59:ee:d4:dc:32:75:4f:34:6a:22:c6:40:36:b5:0a:84:3b:21:
e1:75:9b:b9:7c:18:8f:b1:01:2a:5c:84:31:dd:ec:38:42:04:
0c:db:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:10 2025 by rpki-client