Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File: rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier: HtKJ/QWyG2y40eFAu1oMdKDFYB7OgWfxg9ZIesjV7jE=
Subject key identifier: 1C:73:D2:7A:B6:36:6C:83:53:C2:BB:9C:00:8C:0D:49:8B:0E:CE:29
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer: /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial: 019A70A50A07699EFAD810E65686B3861175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number: 13AF
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: cWvUh9FYIqNgjPbAQQIrVu1v5PqJxuvszWigHT+EWtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0a:07:69:9e:fa:d8:10:e6:56:86:b3:86:11:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=1c73d27ab6366c8353c2bb9c008c0d498b0ece29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:86:62:4b:2b:e4:2b:3e:92:df:3b:8b:30:
13:c8:95:b0:7a:0b:80:8c:6b:af:d9:65:3a:75:f2:
05:7f:15:f4:cb:1c:b8:1b:f2:b6:70:b1:40:f4:3c:
2e:2b:a6:6f:7a:76:4c:24:94:72:0d:cf:6c:4d:0c:
78:43:94:77:3b:52:32:50:49:f4:cd:2f:7f:d8:1e:
52:da:15:2b:46:0d:ac:bc:2e:0a:df:01:fc:43:1e:
b4:a7:f7:a0:9b:3e:98:3d:be:17:85:1a:a9:f1:1c:
84:b6:8e:f8:3e:2e:70:99:8c:e5:78:a1:41:a2:e3:
03:47:a0:0a:e1:00:4b:03:c0:08:97:2c:1c:09:53:
3c:66:d6:b8:77:7d:6d:47:2d:43:63:48:90:10:7c:
7f:70:6b:d7:bc:9d:ad:f3:af:7e:d2:b4:cc:9d:7a:
0e:1e:ad:03:16:a3:0b:0d:b2:c8:6f:1a:44:da:05:
6a:94:bd:90:b7:94:a1:4a:45:7e:ec:b5:be:4f:03:
8a:26:fd:75:9f:fa:df:9a:41:c8:e9:97:df:18:a4:
f4:6f:c9:f7:bb:4d:ec:e2:29:c2:ca:0a:f6:42:54:
26:fd:f9:af:58:6a:d2:70:e5:77:aa:8a:80:95:27:
a7:81:dd:9d:b9:d6:de:66:76:eb:22:e9:c1:76:0f:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:D2:7A:B6:36:6C:83:53:C2:BB:9C:00:8C:0D:49:8B:0E:CE:29
X509v3 Authority Key Identifier:
keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:bb:9c:71:7d:29:02:05:78:aa:19:7e:ee:b8:eb:d2:c3:
fc:30:eb:b4:03:0b:d1:b2:91:7b:23:64:26:28:c6:89:31:4e:
3b:ad:95:1b:25:d7:72:e8:fc:73:a2:eb:ec:39:2d:39:fd:dc:
d9:b5:67:c1:0a:48:66:27:a1:e1:c0:e8:dc:97:63:a3:f7:3a:
78:de:ca:c6:d8:d6:44:48:7f:b8:77:d2:09:67:16:ce:42:68:
93:58:bb:a0:4e:02:91:71:35:e1:b3:04:59:eb:90:a9:c2:a8:
71:34:3f:1c:ab:7a:d8:87:e4:b7:6c:91:75:33:48:5e:92:54:
6b:1e:83:87:ba:0e:b3:a8:21:f3:98:79:8d:c6:23:4e:d8:6d:
27:45:e6:54:2c:93:e2:27:c8:42:c1:64:2a:48:71:02:ae:ad:
f3:85:86:ee:2a:54:91:1e:3b:66:d1:1b:51:35:b9:9d:c2:0a:
b1:b1:0d:51:67:df:d3:41:0b:bc:8a:3b:26:2e:16:1f:f8:5f:
2a:a4:66:5f:16:a6:db:c4:f7:43:f4:bf:f0:5d:a5:f2:31:f8:
ea:c7:87:13:15:08:c5:52:6a:32:64:94:f0:be:9e:48:88:5e:
e8:2c:b0:db:db:d0:33:ff:80:2e:de:3a:09:55:b0:d4:57:bd:
0e:cc:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:46 2025 by rpki-client