Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: 2dgK2UDUTNrvHHkAeH3T9kCQ4HGVJID7o+Arlpzu9CM=
Subject key identifier: 89:59:62:81:E6:EF:DE:D8:5C:60:B3:1A:B8:49:F9:A3:6A:56:96:1C
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019A4EF53640C0AB3D4F7B24124D6A4B8E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 07B9
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: 1GeMkjsZ7adh/p9CLvqwBQKK7IrVxggYUhkO15cyFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:36:40:c0:ab:3d:4f:7b:24:12:4d:6a:4b:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=89596281e6efded85c60b31ab849f9a36a56961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:c8:71:a3:c4:3c:df:96:d9:50:7c:1e:ab:
48:6e:b7:99:c4:9c:e9:44:9d:54:34:e6:ab:77:66:
ca:22:e3:0e:1a:64:f5:39:ce:b3:48:2a:68:e4:f8:
6c:e4:d0:a9:aa:50:a5:f3:e4:39:96:78:5a:78:34:
d7:a2:00:36:03:37:92:a8:93:36:76:72:b6:94:44:
dc:2a:e7:07:87:cf:61:bf:42:2d:d4:7a:e7:cb:d6:
8c:9d:99:c7:15:8b:db:1a:cd:24:00:a1:62:86:95:
45:e0:b2:9b:c9:2b:bc:3d:a2:86:41:9a:9a:58:c1:
30:3b:29:64:5d:40:51:6f:55:8d:a0:7a:a0:56:1b:
97:bd:0b:bf:8a:4f:da:01:ec:db:ae:c9:7c:b6:44:
72:a1:42:e3:c1:a0:26:ff:2e:f9:4c:bb:66:4a:06:
34:80:a7:09:88:e2:60:ae:53:32:ad:8e:5a:98:c8:
20:3a:40:d2:c9:a4:ea:86:07:a5:1a:24:da:31:12:
76:91:66:e6:77:7b:a9:b4:4a:91:8e:7c:a0:85:f5:
4d:ae:bd:61:59:72:f5:46:e2:1e:9f:c7:6c:ef:48:
20:0c:ff:6e:1c:c2:0c:6b:c3:be:41:ad:74:cd:cd:
5b:4e:27:e8:22:b9:16:af:86:af:2b:41:41:61:39:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:62:81:E6:EF:DE:D8:5C:60:B3:1A:B8:49:F9:A3:6A:56:96:1C
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:40:50:75:f6:be:62:98:50:63:05:6f:98:69:1b:58:5b:83:
57:60:be:24:09:23:c7:47:14:12:09:44:34:e0:07:23:71:82:
23:5e:31:02:d8:f6:2c:6a:4c:5f:2e:68:b6:3d:2f:6c:12:e7:
a8:97:a0:35:f2:7a:b1:c3:ef:7a:4d:07:e9:70:c3:df:c6:a4:
16:b5:0f:48:eb:04:24:fd:e5:84:40:19:77:ae:a0:b3:33:c9:
b6:6d:4e:73:ec:13:fb:c4:5a:43:08:d8:99:4a:4b:1f:1f:6c:
75:b0:73:94:b9:25:2a:ae:d8:65:48:f0:9b:1e:2a:71:27:0d:
54:95:0f:3e:3e:dd:37:2b:05:90:8e:51:b0:9c:02:35:0a:bb:
23:b2:2b:1e:bd:7c:ab:53:0f:34:45:c3:c2:06:b9:d6:ee:22:
43:24:0f:f1:f2:49:82:46:a4:34:69:d2:c8:fb:e0:18:da:33:
07:7c:8f:bf:5e:ec:fd:10:83:38:85:ff:16:62:fa:9c:ce:bc:
57:23:6c:69:e5:13:96:b1:b4:ca:98:b5:1a:a8:e3:c7:39:fd:
40:b9:95:32:ca:0d:a5:ba:29:54:05:53:36:07:80:6d:b3:cf:
fa:05:bc:da:87:a5:c0:b4:2b:92:54:62:84:d0:49:7a:b9:32:
29:5e:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:03 2025 by rpki-client