Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: GkZp/88jq77VP0eQNZLmdXuL9ndoWgs8lCvbRjWBC+0=
Subject key identifier: 8C:07:BE:B7:A6:54:A4:18:A1:83:E9:80:01:80:70:15:87:51:E2:C3
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 019A4EF57092C9BBB773D16E87BD5BA93D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: KDbURsKqKlYDfyGnwixarXAGz8pW4veKv47NUYbdPbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:70:92:c9:bb:b7:73:d1:6e:87:bd:5b:a9:3d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=8c07beb7a654a418a183e980018070158751e2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:22:ab:4d:e9:a9:ba:e6:73:8c:11:80:a6:
cb:dc:99:62:27:ea:7c:b0:41:59:d5:0e:c7:03:1c:
df:a2:35:8a:0b:32:ec:5b:5a:95:28:2d:56:3d:ba:
69:a1:57:31:0f:dd:c7:64:ae:48:0f:e7:3b:d1:6a:
a3:1b:c8:26:ad:dc:80:0a:f7:08:dc:df:0e:14:94:
5c:65:1f:07:0f:f4:e3:72:18:6e:e3:57:d0:82:de:
4c:90:04:dd:e3:b8:ad:c4:09:ff:a5:c7:86:00:26:
19:02:ac:25:b0:f5:51:65:cc:57:f9:d7:38:48:9b:
51:d1:ee:f8:3c:a9:55:bb:80:5e:d3:ef:6a:da:c9:
0e:d4:d7:f7:81:41:20:7a:16:b0:db:60:87:b9:51:
af:0a:45:10:ac:48:90:2d:e4:78:38:39:9d:80:5a:
e3:18:66:27:28:cd:11:ac:ca:f5:e2:31:4f:ed:3a:
47:8e:70:63:06:15:00:b6:25:49:28:f0:90:2c:f3:
47:5d:18:3a:a7:02:d4:0b:ad:8d:76:70:69:83:82:
4e:4c:c7:77:ef:36:5f:46:fc:2d:f8:f6:e0:7d:a0:
0e:e8:b5:a3:8d:a8:7e:dc:42:64:77:2c:6d:09:fd:
0c:da:31:25:14:a7:46:5d:48:f6:cc:d6:ba:6f:ea:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:BE:B7:A6:54:A4:18:A1:83:E9:80:01:80:70:15:87:51:E2:C3
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1c:9a:65:38:e9:39:4f:63:df:49:93:a7:65:a1:a4:59:64:
e4:3b:86:29:61:d5:cd:97:97:ed:c2:75:63:8b:2b:b8:97:c1:
60:e4:42:60:a4:56:59:38:19:3b:af:84:00:78:60:9e:89:3a:
e9:e1:87:9f:60:66:34:49:fd:ba:d2:f7:08:1e:1c:48:43:d4:
37:84:a3:63:1c:f9:cf:4d:82:fa:f8:10:95:c7:95:fa:b4:d9:
f2:64:7e:f1:9a:7e:30:71:5a:e3:69:a7:d8:29:ed:81:d9:20:
0d:59:a2:0d:a6:f0:b1:d7:10:f0:c3:79:e2:4e:37:73:75:b0:
51:f2:ad:84:f5:b7:41:91:b7:04:27:d0:15:ac:14:d9:e7:33:
80:79:a6:1e:b7:cb:c0:54:57:fa:ef:d6:b8:fc:b5:b8:9c:11:
60:fe:f1:43:50:8f:f8:09:d6:7d:75:1c:de:4b:f7:ac:07:71:
55:ab:af:bd:73:5a:75:76:b3:bf:f5:c2:db:42:8e:dc:40:da:
0b:1b:51:91:5e:03:5e:5b:4a:92:cc:14:59:43:72:dd:40:54:
34:62:82:e9:2c:75:fe:f7:33:84:16:99:c1:b9:54:c3:bc:65:
0b:20:3a:22:00:c1:d2:26:47:db:73:03:09:5c:78:cb:65:0b:
2c:df:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:11 2025 by rpki-client