Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: SY6t+QWTwBmBi+sIx2u7do5vBgttJEsS0h4ZAVfkUqs=
Subject key identifier: 49:24:8A:86:66:9B:84:CE:66:02:48:1A:04:E1:B8:98:03:AD:70:03
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019A4EF547AF6128673CF913F0D5F715D216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 1187
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: NU8szX6HbWq4PGqhqZcQiO6mC/RtIGAio+pUcvfrykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:47:af:61:28:67:3c:f9:13:f0:d5:f7:15:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=49248a86669b84ce6602481a04e1b89803ad7003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:28:38:c7:9f:96:29:59:62:57:53:60:be:
32:f3:e1:da:5e:8c:a1:20:35:df:18:d7:b7:85:f5:
b8:8c:74:7f:34:d5:b1:04:48:4d:ee:78:4c:9a:8e:
ee:1c:a9:e8:ac:03:58:f9:76:1a:fc:31:b7:c5:7c:
96:8a:40:76:d0:ff:6c:d8:9c:f5:88:f0:3c:a6:77:
5e:c8:37:af:4e:a3:ff:35:2e:70:c9:6a:73:09:6f:
fd:f0:83:8a:33:4a:8b:01:4d:73:1c:72:fc:ea:a9:
be:0b:c8:8c:43:af:5b:a7:27:c0:81:01:6c:79:11:
2c:34:2e:71:11:d8:95:4c:49:d7:6b:5d:16:17:22:
0a:c9:e1:76:09:bc:70:31:ec:42:6f:26:d4:83:c1:
3b:0e:60:09:d7:3a:1f:7d:bb:e9:d7:87:19:8f:74:
5f:62:f9:ed:6a:f4:98:91:fc:99:c1:0b:0c:b4:d1:
13:1e:3d:2e:61:aa:aa:e2:d0:28:73:5b:83:41:b1:
27:20:9f:d6:e1:ae:4b:6f:77:3c:21:97:fc:e5:0b:
6f:3f:bd:d8:79:28:21:0b:2b:42:22:7f:c0:c6:97:
8a:3d:6b:01:1f:4c:9f:5b:89:e8:07:80:ea:74:13:
ac:31:56:b9:71:92:8d:85:46:1f:ff:c0:b8:40:46:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:8A:86:66:9B:84:CE:66:02:48:1A:04:E1:B8:98:03:AD:70:03
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:5d:da:31:b8:ea:bd:fc:df:c5:95:05:81:f2:a2:73:c1:
b0:e3:74:1f:f1:98:c6:a7:9b:59:90:9d:81:15:e7:e0:7a:04:
6d:e7:8b:3e:8e:99:d0:a3:48:79:c4:15:87:31:44:05:b7:cb:
f1:59:3c:5e:66:e9:38:b9:2d:21:05:25:d8:d3:5b:04:a6:48:
32:16:46:5c:6e:40:16:b4:14:b4:2b:b6:ad:c3:29:e5:80:34:
1a:3e:80:21:f1:6d:d3:12:09:aa:6f:fa:cd:67:9a:7a:17:a5:
8f:a6:6f:cc:f3:8e:1e:1f:1e:4f:e7:d9:e8:1d:9e:79:d5:b3:
a5:bf:13:ae:bf:1b:b8:aa:2e:71:7c:1c:19:b8:4b:98:d6:f7:
d0:00:76:bf:a2:51:d1:3e:3b:5c:e0:3c:a7:66:0d:9b:f8:77:
d8:f7:9c:1c:79:42:32:8c:37:91:60:95:ce:73:ac:bf:21:c7:
2a:39:f8:4e:9e:25:de:2e:2a:0b:d0:4e:28:da:38:e6:39:f0:
f4:ac:aa:17:1a:a3:f0:ff:4c:46:a0:ad:a2:87:31:55:d6:fb:
03:61:42:60:a5:cc:17:c4:7b:6f:dc:cd:78:c2:6c:37:54:c4:
b5:2a:d0:27:d3:67:fe:77:35:2e:f7:0e:5d:bc:55:fa:ba:2c:
c3:6e:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:52 2025 by rpki-client