Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier: PHFz+q1cuT5fTR5aklmkW+j5trSDUKqlkem7NJ8/hiA=
Subject key identifier: 6C:50:62:97:07:2A:24:F0:D8:B1:71:BC:D8:67:CE:86:A9:2D:02:5A
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial: 019A50E2FA8479B10CBD829D3F36F8BCE0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number: 09EE
Signing time: Tue 04 Nov 2025 22:00:43 +0000
Manifest this update: Tue 04 Nov 2025 22:00:43 +0000
Manifest next update: Wed 05 Nov 2025 22:00:43 +0000
Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: R1ccwXiKwQdlPuRV4KPstNmOI5OgQn3+Icc4vlW8/C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:fa:84:79:b1:0c:bd:82:9d:3f:36:f8:bc:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Validity
Not Before: Nov 4 22:00:43 2025 GMT
Not After : Nov 5 22:00:43 2025 GMT
Subject: CN=6c506297072a24f0d8b171bcd867ce86a92d025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:df:b8:7d:a6:21:58:c6:d9:6a:e4:98:81:
5e:44:a7:32:07:86:56:60:30:35:be:7a:5e:63:69:
14:54:3f:4f:be:17:b3:85:08:3c:f7:88:b1:78:82:
4c:66:55:27:2e:d1:e2:b7:34:1f:57:58:80:b0:16:
2d:93:67:84:58:4f:b6:fe:17:02:a7:46:14:85:21:
38:bb:47:33:8f:28:8f:5a:0d:63:b9:73:d3:a3:20:
e5:4a:61:34:4e:88:ec:b8:74:ec:1b:4e:b2:03:b0:
db:76:8f:89:47:d0:eb:cf:09:b7:72:4e:ad:3f:50:
ec:26:d4:04:56:50:ea:98:6e:89:44:83:38:9c:28:
f2:2c:e0:41:f7:44:63:1d:07:7d:9c:87:dc:6c:f7:
2f:40:41:06:57:b8:8c:4b:0a:5f:a6:39:ce:17:56:
4c:34:43:b6:bd:89:45:91:4b:fc:0e:b8:b1:08:f0:
ab:5a:de:61:fe:8d:e9:d4:d2:13:ac:b1:eb:03:18:
f9:87:83:0a:14:e8:c4:f8:22:d7:23:b8:b2:e9:c9:
2f:34:7f:96:a8:74:94:2b:48:14:2d:8a:dd:09:80:
84:77:1f:41:e0:e4:26:b4:0a:db:ae:5a:c8:fd:6a:
9b:de:65:5d:23:14:8a:f1:f5:88:ae:74:e2:1c:20:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:62:97:07:2A:24:F0:D8:B1:71:BC:D8:67:CE:86:A9:2D:02:5A
X509v3 Authority Key Identifier:
keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9c:ae:8e:66:8f:24:b3:08:b3:7d:30:60:ae:c2:d1:45:81:
f4:3c:10:44:77:04:50:a0:8a:3e:fb:43:53:37:b5:0b:b3:4d:
e3:99:54:de:09:bf:84:6a:f7:0e:0a:f2:09:47:81:41:19:43:
26:93:46:2a:96:55:1b:6f:2a:a6:8a:a4:2a:3c:e6:8c:1a:5e:
de:d3:b9:d3:d0:e9:44:87:c8:03:87:e6:01:4b:11:33:38:02:
52:f8:53:fe:de:e5:87:8f:f7:a9:57:99:10:8d:fa:c6:b3:44:
fc:2b:90:a0:a6:61:f2:c2:33:97:13:a1:d2:7c:51:78:1a:95:
09:b1:de:07:c8:4b:ac:63:8a:91:cd:69:57:16:e9:25:01:f9:
ea:65:ce:78:e2:bc:a9:c2:c5:e9:0d:aa:8a:e9:a8:42:1d:ea:
3f:f3:d3:7d:80:38:7a:cf:a1:21:2f:80:a2:34:f3:9d:2f:ff:
f5:1b:22:4d:5b:5e:57:e3:ae:06:50:7a:4f:94:90:7c:db:5f:
22:8e:cb:e7:5c:fc:55:53:3f:51:cf:de:77:c2:0d:59:3f:f2:
42:dd:19:1c:8a:70:f1:45:b2:b1:47:a0:45:fa:9c:b9:46:ea:
51:c2:e3:a0:d9:93:50:2d:b5:17:d0:b3:ea:5e:4c:b9:53:7d:
8d:4a:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:54:20 2025 by rpki-client