Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: DNDuAAEaoJQix0PqrHtM61RnI68DtywHPsKYY/5ahNg=
Subject key identifier: A0:33:5B:ED:89:C1:CA:C0:60:6F:D7:AA:89:26:9F:A8:14:EC:5B:42
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 019A4EF4350005D525F91E8AB1AD769A75EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0603
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: JR8EU+Ee2QZiieteS4gQecPhOcJt8LgEGwPYJ1cwIyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:35:00:05:d5:25:f9:1e:8a:b1:ad:76:9a:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=a0335bed89c1cac0606fd7aa89269fa814ec5b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:9c:6e:a6:77:12:c2:27:d8:f6:3c:cc:2a:
f4:a2:04:02:bf:ac:aa:47:7c:5c:fa:f5:d2:31:b6:
77:63:d1:a7:59:d2:ab:24:23:ef:68:01:37:32:c5:
f3:94:34:f8:3d:33:10:e6:95:cd:b6:2e:6f:1b:5b:
bb:1d:7d:48:78:3f:15:f9:38:05:6d:4d:d6:9c:be:
4c:52:9c:bf:dc:b8:fe:dd:8f:d6:9f:a9:05:ff:7c:
b4:69:64:28:b3:4a:50:71:15:aa:85:e5:a0:71:10:
a1:8e:2f:08:27:18:2a:84:09:70:e4:fd:f1:e4:54:
3a:9d:3a:f1:fb:ab:51:a1:f5:e1:52:2f:79:80:aa:
4b:75:dc:db:7e:bb:7b:62:68:c7:e8:93:cb:44:1e:
1d:75:d3:0f:70:d3:e1:a2:d6:42:60:f2:0f:b0:86:
82:ea:04:a6:11:80:88:b2:85:e7:6b:23:31:c4:c8:
eb:98:8a:74:5b:81:7a:45:52:cc:59:d3:92:61:73:
b9:8b:d7:86:91:c4:2e:c9:ff:17:77:12:ef:5a:13:
91:aa:cb:ce:87:81:b9:cd:8c:d3:91:f5:5b:a1:b3:
b0:b1:ac:e5:8d:65:01:ac:6f:f1:a0:34:57:be:e1:
ec:21:9b:0d:a9:04:b4:b8:1c:bf:7a:49:9f:be:4c:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:33:5B:ED:89:C1:CA:C0:60:6F:D7:AA:89:26:9F:A8:14:EC:5B:42
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2a:00:9e:25:89:0d:66:e1:8f:7b:93:49:64:ad:0d:17:e6:
c2:ae:33:29:56:15:a0:06:29:de:65:5b:3e:ff:58:ca:d2:da:
61:80:88:13:d4:59:a1:ff:5e:ed:bc:2f:b7:1c:92:60:8e:7f:
f9:47:19:62:75:f0:15:33:14:50:21:39:0e:0f:82:ae:0d:db:
63:fa:66:59:21:46:e2:69:5c:91:ec:f1:0e:89:27:7a:46:ec:
b9:e7:d4:70:c1:5f:55:0b:99:15:e4:a8:13:75:95:2c:82:bb:
9d:bc:d4:b8:9a:6f:05:ef:1a:66:b8:da:88:4a:4c:f3:d7:10:
eb:4b:71:30:fa:a7:0e:64:46:e0:14:01:e8:5f:2b:91:ad:df:
60:5e:aa:78:81:d3:b4:78:a5:db:13:da:03:ab:bf:9f:2c:2f:
10:4e:c5:1d:0a:e9:33:36:02:7d:26:1b:95:48:69:59:db:be:
a9:77:1b:8a:3c:6c:d7:fa:63:d3:c6:8e:e8:d1:68:89:09:62:
3b:10:cb:ac:33:87:a7:20:e1:6d:7b:b2:d3:49:f6:55:19:a8:
95:07:f9:6a:66:4b:22:38:93:82:66:97:d2:3d:1d:4d:11:40:
d4:f4:22:ec:68:91:61:42:19:9d:c4:a0:7b:c5:01:d1:c6:21:
c8:05:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:36 2025 by rpki-client