Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: fVFOs18iGUmxmC+mAT83ZAcAIsqsKiRBjZyp6QnE1as=
Subject key identifier: 91:82:4E:73:28:98:2E:BA:04:F7:7E:97:32:52:E2:A4:35:2B:D8:E5
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019A4EF43A1194CB9E29029D7289F31DE190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0AFE
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: 59r4HMlxleSHLenGTXW8N347MhJeVZ6ElWCMG+WttgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3a:11:94:cb:9e:29:02:9d:72:89:f3:1d:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=91824e7328982eba04f77e973252e2a4352bd8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:58:06:f0:67:49:55:b5:70:9a:64:01:c6:
b2:2a:d7:ef:45:3f:c5:33:7d:3d:74:00:36:88:d8:
12:4d:39:cf:dd:db:21:a3:93:7f:3f:4a:6e:f9:86:
5d:3a:06:1f:6d:e8:d0:83:4c:62:50:08:63:d4:14:
95:89:83:83:4c:2a:b8:ee:87:17:7e:af:24:99:8f:
17:a6:61:66:5e:29:14:56:36:9c:ad:ec:af:a2:cc:
75:e1:d6:a8:22:bf:80:6f:09:7e:26:f6:be:f6:b0:
d2:49:52:ad:13:0a:a1:fc:57:8f:6e:fd:47:f1:a6:
7e:06:02:4f:17:bc:2f:a1:97:21:d2:3c:6f:29:0e:
67:73:52:6e:df:b6:b9:5e:94:6f:c3:b3:93:9d:2c:
ba:1b:7d:29:99:08:9f:f5:ba:56:63:15:c8:cd:e2:
ed:cf:14:31:e0:05:c7:91:4e:6d:91:c7:04:53:4f:
1b:f1:4f:6e:36:3b:df:6f:4c:c4:52:a0:c8:70:28:
b9:ee:56:95:c4:be:12:14:3e:8d:e9:5a:d8:95:42:
e1:6f:ae:90:5b:f9:ab:5c:28:17:49:d5:09:b0:89:
78:85:93:21:21:48:cc:73:8c:1b:65:40:2a:46:5e:
59:49:a5:7e:18:b8:e4:38:21:cf:ed:c7:31:71:78:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:4E:73:28:98:2E:BA:04:F7:7E:97:32:52:E2:A4:35:2B:D8:E5
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:80:bf:66:4a:e2:6e:9a:e6:93:dc:de:96:a4:2e:47:a1:a6:
c1:ae:55:47:55:46:b6:27:c7:ab:66:14:bd:67:23:a8:08:45:
0b:9e:b9:97:a6:4d:3a:63:38:fb:7e:a7:95:c3:e1:3b:91:a5:
cc:2a:63:fc:d7:4a:ea:41:c0:24:23:13:d6:af:36:06:b2:99:
d3:96:02:33:80:3b:d4:c9:42:73:e7:49:17:e7:46:44:94:52:
25:4a:a4:9c:af:4e:31:1f:82:71:f8:82:b3:e3:dc:b5:fc:2d:
62:af:aa:7b:51:b9:9a:88:5c:d8:b0:e5:e0:9b:98:09:ba:e7:
26:56:53:13:e3:20:bd:35:0e:3d:6a:f7:6c:79:52:9e:12:c6:
99:b2:ea:60:f7:21:10:b9:73:78:6c:e4:80:22:72:ed:61:aa:
9e:66:0e:dc:91:31:ed:b3:10:49:13:03:b1:b0:29:09:15:2f:
bf:c6:00:68:b1:1d:6c:95:b6:20:16:0e:c8:72:e3:b8:86:8f:
0a:b6:e9:af:2d:7e:80:9a:c2:48:e9:ea:f3:56:b6:f0:af:9c:
3f:22:a9:fc:3c:07:d6:9b:30:4b:d8:25:d5:f5:88:df:d5:1b:
2f:5e:45:0e:57:37:14:0e:11:57:ea:54:9a:1e:93:07:92:77:
18:da:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:55 2025 by rpki-client