Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: UCi1IumwAWhhR0N8qeZuIbeDr25YEhVOJSQpJuUeocM=
Subject key identifier: 8A:F2:46:E7:58:66:06:A8:BD:94:C3:3D:A0:A3:C2:1E:C0:B0:30:5D
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019A70DC73EDA98424AFEBDC95FE33A77377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 03:01:26 +0000
Manifest this update: Tue 11 Nov 2025 03:01:26 +0000
Manifest next update: Wed 12 Nov 2025 03:01:26 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: pJDydsATbi/lm1NweTjdxv2fwNcJwEwkOViRYAa+W2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:73:ed:a9:84:24:af:eb:dc:95:fe:33:a7:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Nov 11 03:01:26 2025 GMT
Not After : Nov 12 03:01:26 2025 GMT
Subject: CN=8af246e7586606a8bd94c33da0a3c21ec0b0305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:ad:8c:d4:d6:d5:c5:5f:dd:2b:25:00:d6:
2b:39:ed:ae:31:7b:f3:81:2e:44:2e:a1:ca:ab:e7:
cf:22:88:c3:09:0f:1b:27:f7:51:e8:a5:73:a7:cf:
1a:aa:aa:4b:58:8b:a1:b0:c9:55:96:0d:b6:20:5c:
a0:ec:bd:f2:35:68:7d:a0:ab:2d:ca:9e:9d:9c:cf:
b3:f9:87:7b:17:53:7d:d8:87:c9:45:30:ba:44:e0:
37:2d:23:45:8d:ef:2b:ce:3f:b2:20:c7:74:67:e9:
36:18:c6:27:84:d5:a8:c4:55:35:1c:7e:32:44:10:
04:cc:12:bf:04:66:98:3b:a9:48:36:87:a7:f7:59:
2a:31:88:7e:fd:58:c7:71:ae:2a:8c:cb:0e:b4:97:
74:56:30:ed:42:42:89:7a:13:e2:75:df:86:a1:51:
ed:67:4a:fa:d9:84:79:12:2b:b0:da:74:a3:1a:cf:
ba:0d:99:e9:2b:ef:36:5c:d7:b5:28:63:bc:d4:14:
0d:7e:2d:10:e1:56:32:46:b0:51:88:2d:5c:87:f5:
f0:f1:37:8a:a7:0c:af:84:1a:3f:7d:25:96:5e:6f:
84:00:33:3d:ad:59:81:11:66:5a:10:43:a2:58:b2:
a7:1a:d8:6e:b8:ad:b1:e3:ea:30:60:16:cd:46:8c:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:46:E7:58:66:06:A8:BD:94:C3:3D:A0:A3:C2:1E:C0:B0:30:5D
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:ff:a3:99:db:2b:12:f1:21:85:91:da:30:a2:c1:a3:45:
18:e4:24:fb:1a:df:e8:bc:5d:e0:38:03:3b:6b:9e:15:31:bd:
24:9c:ea:c5:41:9e:1c:6f:ac:56:8c:69:a9:85:45:3e:f0:14:
28:67:87:24:d6:9a:a6:eb:f7:2a:74:38:ea:83:2a:fd:bc:3f:
60:94:06:ee:3f:3a:2a:a7:95:b6:0d:14:9f:85:bc:29:45:e1:
22:9f:bd:b3:f5:58:5b:2c:0d:40:07:b2:52:06:0e:9d:17:d8:
19:b9:6f:1a:ed:88:c1:26:3e:33:9b:0b:32:99:b2:28:52:2d:
ca:c8:4a:a5:50:b5:eb:08:21:ce:88:ac:e6:35:0d:9d:50:8e:
a2:22:0f:fe:07:2a:b4:f4:d4:e2:9e:1a:67:7e:d9:6a:7d:71:
93:c7:61:03:ea:e8:6a:81:34:16:aa:1f:5b:2d:75:4b:3a:06:
21:2b:d8:07:53:1d:ad:22:c6:6b:98:8d:82:28:7b:04:77:29:
e9:b4:e8:39:4c:a6:ef:d2:fb:b8:11:9c:59:12:fd:34:d4:77:
ae:06:19:0d:a4:c4:1f:4e:41:f7:83:3d:bf:e0:67:c1:5e:14:
16:63:e4:99:d9:50:3e:2d:1c:df:95:0d:79:71:01:c7:71:e0:
98:b6:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:01 2025 by rpki-client