Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: MEOxqiZt7Xm38xh3tvvS3jiN4Lst+5+V0BRHGwT8bL4=
Subject key identifier: 05:34:74:0C:12:09:3C:DF:30:9C:E0:76:BB:3E:5B:01:42:6B:C1:BD
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 019A72261B3B8F731874B967F3AEBA402D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 109B
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: 4kXDGDA8at3wn20/n66Nxkkv3Rw/AeudqfFPezMrAw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1b:3b:8f:73:18:74:b9:67:f3:ae:ba:40:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=0534740c12093cdf309ce076bb3e5b01426bc1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:96:09:a5:af:e5:52:e4:36:38:4c:e6:57:
2d:50:dd:f4:76:51:68:11:a1:18:9b:6e:db:f1:b2:
82:3c:98:9c:90:0f:92:ce:dd:95:27:b9:ac:17:a2:
fe:3d:33:56:50:57:76:07:54:75:d8:d4:06:42:fe:
51:dd:08:40:2b:1d:eb:c4:a1:76:f6:01:d1:aa:4f:
77:fc:7a:77:b5:39:06:11:80:e0:ed:37:41:b6:0d:
d0:a1:70:c5:1f:87:20:a0:b4:eb:13:6e:50:2e:86:
0e:04:9e:64:07:8f:8e:0a:4f:fa:34:41:89:78:37:
d1:61:97:fc:52:71:ac:4f:a5:2b:ed:30:e7:f5:88:
22:fc:de:3f:d2:ef:95:14:6c:73:f1:44:17:6b:4b:
9d:82:0c:54:d4:c4:e7:ca:f1:9f:4a:b3:8a:db:1c:
7a:b0:70:ba:90:b3:0a:f7:b9:00:7f:cd:17:77:25:
b2:bb:f8:c6:4f:00:ea:3f:8c:05:eb:d4:e0:3f:34:
a1:8c:7a:28:9c:62:fb:0e:80:df:f7:7c:91:38:86:
30:75:aa:96:7f:f9:bd:ac:d2:ae:c8:b1:3e:f3:1b:
40:53:df:88:9e:41:b0:33:dd:9e:f4:ea:4b:2d:ff:
d8:57:e6:4a:c3:0e:f7:c0:b7:73:22:d1:1e:fd:8d:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:74:0C:12:09:3C:DF:30:9C:E0:76:BB:3E:5B:01:42:6B:C1:BD
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:28:b2:dc:04:5b:2f:eb:cb:21:28:9b:bd:c3:42:db:48:ad:
fe:e4:e4:ba:a5:06:dc:74:27:3f:36:47:5f:d2:5b:d9:da:59:
4a:3f:36:27:19:4d:b3:da:6f:76:0e:17:5d:6a:7f:01:d0:64:
de:05:e9:86:b8:7e:52:25:12:a9:b4:d2:ff:98:51:0a:35:05:
c3:49:1d:07:9e:66:4d:39:bc:6a:55:9c:ac:c1:bd:28:60:01:
54:7c:8b:71:22:7f:5b:c3:db:fb:50:20:9b:21:6a:95:fb:42:
15:86:38:76:8d:03:2a:5c:0c:bf:55:f5:f3:63:9b:2d:9d:08:
be:f1:3e:f0:de:2e:c8:36:3a:92:2d:95:c1:d7:60:5a:b2:96:
57:1e:2d:51:7d:4e:b7:2c:6e:20:f5:82:78:be:f9:8f:f9:a0:
f5:0a:20:fd:0d:57:eb:8b:c5:b7:14:4a:22:7c:e4:b0:a3:5f:
ca:d8:77:a3:d4:64:21:a0:b7:72:d5:c3:e7:45:e7:44:d4:64:
6b:07:a7:51:07:40:95:46:01:de:ba:2b:db:f2:5d:fb:a9:20:
f5:9d:28:9c:26:94:8f:59:d9:1a:fb:59:df:e2:b1:c3:71:ae:
48:f2:98:c6:a0:1b:3c:fc:40:50:56:1a:2f:01:94:f6:00:6b:
a2:97:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:52 2025 by rpki-client