Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: Lx5NxpMOYi1DTnOTIBg/d35YVANxmnn3AOvMc6Tl9dQ=
Subject key identifier: A7:F3:FE:DB:EE:D3:9A:3B:1A:1B:1E:91:BB:7B:DC:03:9D:79:83:E6
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019A50E3FA58FAFBACFD878DDE5899A8C7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:49 +0000
Manifest this update: Tue 04 Nov 2025 22:01:49 +0000
Manifest next update: Wed 05 Nov 2025 22:01:49 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: 5LYv92zycihcCLrKw1jWo9RQXWQzZehS4mBCm8mt0Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:fa:58:fa:fb:ac:fd:87:8d:de:58:99:a8:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Nov 4 22:01:49 2025 GMT
Not After : Nov 5 22:01:49 2025 GMT
Subject: CN=a7f3fedbeed39a3b1a1b1e91bb7bdc039d7983e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:f9:7c:d8:9f:01:4a:ce:26:99:31:e4:68:
c9:6b:4b:85:a0:02:87:f7:a6:8a:47:cf:54:a8:33:
d4:55:9f:af:aa:52:2e:83:2f:a9:fa:79:fe:cd:ea:
22:a2:c8:10:eb:6f:bf:d8:71:37:43:ce:83:81:3c:
ad:11:25:22:08:9d:23:7c:7f:93:f7:9b:96:70:50:
b6:72:58:cf:a7:e8:6e:34:8a:78:6f:ce:4b:a5:8e:
77:b6:32:d0:9b:81:50:62:df:38:86:ab:43:f0:37:
67:f5:29:0d:64:3c:5d:22:f3:fe:f3:8a:4c:46:30:
8f:78:b8:e1:e1:a7:12:f9:10:d1:34:76:8c:ba:bf:
36:25:e6:0a:1b:bd:e0:89:a1:6c:a5:06:f9:46:b1:
b0:c3:65:64:c0:7c:30:91:81:6f:06:9a:f2:57:8e:
21:ff:21:77:c1:0f:c1:fd:0f:77:c3:df:25:1d:b1:
6e:20:29:30:12:09:c1:ac:8e:82:e9:7b:d6:63:b1:
02:e1:36:44:a0:d0:6d:cd:1c:37:d3:1c:66:d8:6b:
5f:4b:48:00:5e:ae:0f:19:6b:9c:fc:64:fd:d1:53:
56:0c:3a:78:33:8f:71:12:dc:06:4a:7c:38:dc:aa:
d4:86:aa:6a:fe:2b:f2:37:f8:81:b9:43:0f:68:6c:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:FE:DB:EE:D3:9A:3B:1A:1B:1E:91:BB:7B:DC:03:9D:79:83:E6
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:21:da:9b:c7:d8:43:0c:8e:ae:37:3c:ac:23:98:88:16:4c:
5e:75:19:ac:e5:dd:b8:b0:1a:ff:38:b6:59:a9:3a:21:92:4a:
d4:71:37:be:36:b0:96:23:10:bc:2a:1a:0b:76:f9:e1:4a:bd:
5b:78:3f:cc:e0:ef:da:dc:44:c7:c9:17:28:49:0b:4a:e9:6f:
83:e2:c5:c7:aa:9c:68:17:c5:4b:2f:2f:16:18:99:d0:5d:53:
54:6a:ed:e5:f5:2c:ee:c4:66:ab:69:ad:ba:79:f9:f9:54:ef:
54:e8:a5:26:3a:a5:ac:6e:06:e0:e2:b6:6b:7b:83:ed:e1:71:
7a:fb:f5:19:bf:43:ff:2c:3d:b1:19:2b:5e:f8:90:cc:62:ac:
8d:bf:c8:64:be:b4:d6:ee:83:32:bb:c3:09:bd:02:e6:0f:fe:
b2:4b:a4:73:85:6a:16:13:81:8e:52:76:ca:a1:f0:12:b6:76:
f8:5c:5f:c5:29:9b:e4:95:80:46:cd:b1:a4:54:fb:1a:89:32:
65:bd:50:4e:98:cd:5e:7a:39:0c:a2:6f:1b:fb:f5:a3:36:c8:
eb:75:90:67:ad:5c:88:d8:23:94:82:ff:ac:da:72:3c:fb:b4:
9c:04:c3:14:c2:5b:b9:0c:ec:4e:19:55:6f:fb:f4:7b:d6:ee:
eb:3e:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:00:23 2025 by rpki-client