Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: 00y0jfwahlS36gAR2kraPtFc5c7j53wHjCQ1iw/SeEY=
Subject key identifier: 10:72:E6:55:1B:27:73:C2:F7:28:07:3C:40:AC:64:5B:DD:DE:32:4C
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 019A4EF47DCD71C2FFF639717E7819296A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 157F
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: iuV1dyRwK/xsJfLbuLzKEwK/mmLQH60t7lPsG0srt6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7d:cd:71:c2:ff:f6:39:71:7e:78:19:29:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=1072e6551b2773c2f728073c40ac645bddde324c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:e2:80:1e:e0:bb:91:94:6e:83:b4:1f:65:
15:fd:83:ce:6f:bd:7a:59:bb:87:31:49:35:a2:2e:
4b:f7:c6:3e:3d:dd:b2:85:84:32:a7:84:be:23:ef:
b6:8a:1f:90:cd:35:ad:7b:d5:19:5e:aa:ea:c0:1e:
32:4d:46:9c:3a:29:50:4d:bd:31:ab:83:94:9a:01:
84:6a:12:4f:2f:04:2b:08:4e:2f:e6:c2:e9:81:af:
5b:fe:a1:e4:26:1e:2d:61:6b:77:1b:33:8b:19:73:
3f:53:48:60:e3:5e:6b:29:af:2e:06:d5:fc:cc:3a:
b0:e8:a1:0b:b1:3b:a8:60:20:a9:fb:13:91:a6:ca:
ee:2c:d0:c8:81:14:15:ed:41:78:e9:59:45:7b:24:
3c:7b:3d:43:c7:56:b0:1b:dc:3f:50:2b:1f:aa:5f:
f3:fe:12:bf:26:a0:72:c2:ed:2c:5f:b6:51:e8:8a:
e8:c8:3a:65:99:e7:ec:5f:a9:86:18:25:0f:27:63:
53:47:dd:f9:cb:6f:0f:94:a8:46:c4:84:fa:05:82:
14:0f:7b:21:fa:a4:52:e6:91:1d:bc:ae:88:b0:6d:
83:a4:12:cb:4f:26:e4:d4:89:68:34:05:02:3f:ce:
31:21:e4:f0:ba:06:fd:25:8c:fb:57:bb:53:4e:06:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:72:E6:55:1B:27:73:C2:F7:28:07:3C:40:AC:64:5B:DD:DE:32:4C
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:79:7e:1b:12:86:55:65:a4:3b:da:88:00:53:d4:b4:89:bb:
c7:f1:79:3d:6a:35:d8:3c:9c:64:19:db:d0:7e:28:ed:01:f4:
25:e3:87:46:f9:52:19:f7:91:0a:bc:6e:0c:df:f6:c2:14:99:
18:b3:41:85:de:40:07:63:29:a0:fa:6b:9c:20:bc:d9:aa:53:
27:47:8a:8a:50:74:9c:01:ab:30:65:97:77:ca:d9:5b:32:10:
48:6f:ee:94:44:f5:78:61:54:6e:8b:8b:36:aa:6d:7f:3b:73:
ad:46:59:fd:d9:a8:28:ef:ea:22:80:32:52:d3:db:65:fe:3a:
69:be:47:e7:2c:4e:9f:69:90:f8:11:69:7d:6b:e1:2f:26:ca:
34:21:ed:16:3e:71:93:4f:96:ca:05:ff:1f:04:d7:d9:74:8c:
bf:8f:e1:7c:92:49:a0:2f:96:8c:50:18:8e:36:8f:c2:26:c0:
d0:9b:e6:8d:10:17:e8:fc:c3:66:ca:f8:40:98:6a:27:ed:0a:
60:ea:a8:ad:e1:1a:c2:27:7f:83:e1:87:79:86:aa:6c:5a:2b:
9e:22:9b:e7:85:32:26:e0:09:f6:48:28:54:07:f7:18:0d:e4:
9f:e5:73:ca:7e:8d:58:84:58:3a:68:42:1f:dd:2e:39:1d:37:
e3:62:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:09 2025 by rpki-client