Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: fj9rUkmM45KFJJfRNfNlq/A4eDvaqE2xmgmj1TSzm0g=
Subject key identifier: AD:58:96:11:82:D8:AB:C8:AD:A1:1A:3E:B9:46:A7:29:95:47:1E:D2
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 019A50E4066CF7FDE87E11CE167561B58639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0EE2
Signing time: Tue 04 Nov 2025 22:01:52 +0000
Manifest this update: Tue 04 Nov 2025 22:01:52 +0000
Manifest next update: Wed 05 Nov 2025 22:01:52 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: SYLLR0xnFjoBkopR1nb+5vhU194bcGd01CLeQTgvzS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:06:6c:f7:fd:e8:7e:11:ce:16:75:61:b5:86:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Nov 4 22:01:52 2025 GMT
Not After : Nov 5 22:01:52 2025 GMT
Subject: CN=ad58961182d8abc8ada11a3eb946a72995471ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:04:c8:5e:93:e5:f6:05:42:f9:9c:a5:2d:
5e:eb:1b:6a:b3:7d:62:7b:de:db:01:7a:5f:78:6b:
b6:41:7b:04:89:5a:2f:66:13:b9:b8:97:83:85:4d:
08:72:bd:65:86:23:5c:8b:c3:8e:af:37:ce:a7:99:
82:39:8e:86:9c:3c:3c:d8:22:2c:d7:b2:12:63:80:
be:41:40:46:7c:b0:b3:80:c7:1a:43:26:be:50:37:
e5:83:59:57:d3:cd:2b:85:18:d7:be:a0:01:ca:49:
ac:52:c2:d6:26:d9:3e:e4:bc:25:07:aa:78:cf:c0:
a1:28:ef:cb:de:b2:76:0e:f6:b6:e0:6a:69:6c:94:
3e:d0:d2:32:46:48:06:0c:d8:a1:77:3f:80:f1:80:
99:b7:1d:80:c6:ca:61:fa:73:30:bd:04:c4:7f:08:
22:25:8f:8e:88:e3:59:d4:14:1c:37:af:9f:11:21:
4e:e3:ca:e3:02:ca:06:df:6d:88:5c:c6:c0:8d:cb:
51:78:08:5d:b6:04:68:43:61:66:2d:1f:dc:03:d1:
61:09:22:67:2f:28:ba:c4:bf:b6:00:a7:ec:87:e4:
fc:63:f8:e8:65:59:7d:8b:e5:1b:ab:38:2f:aa:f9:
b1:24:4d:8a:ae:5d:9a:68:2b:4d:ac:08:21:3e:65:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:96:11:82:D8:AB:C8:AD:A1:1A:3E:B9:46:A7:29:95:47:1E:D2
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:0d:96:b3:ca:dd:07:fc:c2:6a:6c:c6:9b:46:03:8b:0d:
cd:58:e5:d1:71:93:f2:a0:40:56:23:29:08:af:a9:68:12:7e:
79:2d:d1:2d:27:35:f4:e6:b4:2f:2c:30:7b:76:63:04:ae:96:
3a:32:70:11:13:b7:41:81:57:5c:7e:24:5e:3b:9e:8d:71:52:
57:6e:1f:e7:26:7d:f6:7c:7b:8a:27:0c:fa:c0:52:b6:84:01:
75:2b:9a:ce:b0:7d:b3:ca:96:da:9b:49:01:5c:82:07:29:03:
da:26:b2:90:0f:cb:95:4e:77:e9:33:10:d9:d9:3c:e0:c3:15:
2a:89:b9:bd:ef:4d:bc:82:1a:c2:3d:a0:5a:5d:d6:e4:70:60:
d2:3e:93:b7:37:48:98:f6:c2:82:2c:9a:8a:8f:ce:e4:d4:80:
af:68:f2:7b:e4:f4:78:81:b4:7c:51:6e:c4:6d:6b:5c:bc:64:
10:0d:96:40:a0:44:b4:60:02:52:a7:e9:5a:98:50:3d:86:fc:
a1:c9:1f:8b:2e:8a:3d:f4:fc:e7:df:9e:0d:12:95:99:72:5a:
62:ed:6e:68:d8:db:e1:fd:5a:e0:dc:72:71:81:4c:d9:33:ca:
56:01:88:4f:ba:f7:15:04:86:a7:f6:a3:a5:99:a2:74:32:66:
2d:c3:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:18 2025 by rpki-client