Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: 1AXOh44/ia2u1vwWdAvhybgGVTRFK+yHpH3OVvX4Hp4=
Subject key identifier: 4D:81:77:66:FE:CC:8E:BF:26:81:AC:42:A0:D3:6B:4D:89:02:8E:F5
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 019A4DAAD86E51E15548F4AC334C9D16316E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 0F5F
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: LmEReDVbZDrEDdpzGjFfG0FObke/CXxytyzm1s/g9ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d8:6e:51:e1:55:48:f4:ac:33:4c:9d:16:31:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=4d817766fecc8ebf2681ac42a0d36b4d89028ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:75:0e:0a:05:77:ea:2b:a1:c3:be:e4:60:
dd:61:36:ef:cf:b7:74:18:87:35:f1:ff:93:e8:0f:
aa:2b:a2:06:0c:8b:c1:48:a1:bd:fa:e0:58:ec:cd:
85:21:89:c7:1e:d9:8d:3f:00:23:00:db:02:d1:aa:
97:2f:77:bd:5d:fd:8d:cf:5b:68:0d:d8:6f:1f:ec:
cf:1b:4a:6c:5a:c7:85:d4:d1:13:9d:c7:a6:92:f9:
a5:3d:06:21:2f:41:a3:36:3c:69:64:40:03:0b:8c:
9c:3e:22:22:bf:20:71:06:25:59:3e:0b:4b:c4:a4:
c3:40:a8:c4:bc:71:f5:92:f8:e5:8f:fc:13:60:0f:
45:2e:1a:fc:1b:01:9a:3b:54:47:b2:1e:6e:ab:0e:
87:05:fb:63:c7:de:ea:77:f0:29:a0:30:e6:67:b8:
67:68:04:d3:ad:28:8a:95:70:10:d7:dd:b6:e6:da:
15:00:eb:85:8a:13:73:14:d5:96:69:8e:33:18:f2:
cd:b1:56:00:7e:0b:90:51:de:e0:47:7a:09:fb:d9:
dd:f6:a2:5a:b8:59:c8:9a:b5:57:e1:7b:00:ec:c7:
15:fb:0b:01:35:89:fb:15:70:06:a2:58:dc:14:b4:
bb:e7:9f:13:08:e4:4a:d7:82:25:62:1f:8a:48:27:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:77:66:FE:CC:8E:BF:26:81:AC:42:A0:D3:6B:4D:89:02:8E:F5
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b4:fc:74:80:43:5b:8f:87:b4:53:a8:57:5e:19:44:01:14:
ab:61:3a:e3:8c:63:ed:a6:0b:1f:38:d1:3c:22:15:ce:c9:6d:
ff:e2:ee:16:e1:8b:8c:9b:fc:b2:9b:80:d4:57:ad:9f:87:41:
a6:11:30:16:57:73:f9:f7:1e:18:f5:8d:24:fe:a9:81:cf:18:
7d:5b:92:4d:cd:4f:bc:f0:65:90:9f:6e:f7:31:90:ea:ef:2d:
8b:f4:a0:f9:33:97:4e:08:cc:55:0b:32:1b:bd:49:a8:11:f0:
69:9d:5e:28:99:ea:fe:cd:89:53:ef:34:26:94:b6:6e:05:70:
f8:b0:5c:c8:47:9a:2f:4f:65:60:4c:ed:64:a2:4b:b1:2d:ab:
b9:20:f8:92:37:d1:b8:99:ff:0a:4b:0d:87:6c:34:79:bb:8a:
9e:f4:a2:7e:0e:b9:9c:6d:9d:05:43:c8:0d:1e:9d:5f:31:3c:
ee:a1:59:45:59:11:71:46:dc:f2:c1:c9:45:df:93:fb:fa:b1:
6c:fd:ef:23:19:e5:bb:1b:07:db:73:78:9a:a7:45:78:cf:07:
3f:d5:9a:ac:7c:a1:1a:80:fc:cd:94:19:8a:88:2b:c0:ef:d2:
0e:ff:1c:14:37:0e:9b:0d:9d:71:2c:b1:39:69:53:48:ae:00:
dc:50:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:47 2025 by rpki-client