Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: 1Vjv3S9lOvovd4xYKSbrbIo8oLWdZ4jbO7uQmkklK70=
Subject key identifier: 95:9A:AC:BF:03:E2:44:7B:8E:93:A0:E4:BB:91:C0:31:B8:6E:A1:4A
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019A4EF5948D83A9ABC2DF0AE8F75B28E9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: nW1Jhjhn3uMoXYaTAvmmq8ukTUuxn+e9DfTyAKUwsBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:94:8d:83:a9:ab:c2:df:0a:e8:f7:5b:28:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=959aacbf03e2447b8e93a0e4bb91c031b86ea14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:f0:3f:47:ba:61:9a:4b:95:40:53:d4:11:
f5:75:2d:b3:f3:bc:c3:70:9c:ff:1b:8f:95:6e:d5:
6c:b8:83:e5:d5:1a:cf:b0:32:ee:b8:c4:62:a6:98:
3b:7b:b2:f8:22:47:72:2f:49:f0:c8:09:7f:96:c4:
51:89:ed:9a:54:0f:1e:97:36:ef:7d:d2:24:d7:66:
a0:a3:76:72:bd:d6:ca:53:55:bd:08:44:be:9d:7e:
7f:18:ee:bb:87:ac:e1:51:17:03:bf:67:2f:3d:38:
b0:9b:f3:0b:b0:39:c1:bf:ce:1e:7f:d6:60:9a:30:
98:d4:6e:68:ed:5f:7f:bc:94:dd:20:a0:a4:d5:53:
54:b8:f2:83:70:4a:bd:ab:9b:95:35:7f:06:20:b7:
97:62:37:dd:ad:00:7e:4e:6d:8e:a4:c6:2a:87:c0:
05:ea:46:8a:14:77:37:bd:19:30:3a:38:9f:cb:d8:
86:32:19:64:ea:b1:8a:59:90:de:4b:61:20:76:65:
46:7e:83:f1:da:83:a7:9a:80:dd:a7:bb:93:1e:a9:
06:15:30:3a:ff:a8:cc:c0:43:a0:22:77:99:39:20:
62:ce:bf:b4:70:55:13:69:82:72:8c:89:3c:bb:ce:
d3:10:dc:1e:7b:d6:86:d3:4d:5f:a2:a0:dc:27:2c:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:AC:BF:03:E2:44:7B:8E:93:A0:E4:BB:91:C0:31:B8:6E:A1:4A
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:20:3b:f4:8f:c8:9c:9b:37:52:97:ce:75:3c:11:b7:73:94:
5a:63:db:5a:d6:b7:10:77:e6:08:70:0a:05:57:a2:b5:d3:5f:
d5:f6:4e:19:95:fd:1f:c4:bd:2f:5d:22:98:bb:29:8e:8e:fc:
9e:d6:ff:5b:2d:d1:28:be:0e:23:bc:37:b8:77:a4:33:8e:87:
e1:b3:59:57:35:75:2e:08:d9:91:4e:47:b6:9f:1b:0e:09:b1:
e2:83:0e:0a:c8:d7:d7:91:d9:7d:ea:77:06:d2:5f:d3:85:cf:
54:f3:50:ee:37:52:9a:5f:e7:12:68:af:8b:ab:e5:3d:b9:40:
f6:77:3a:3e:4e:60:85:36:c8:1d:8d:84:fa:d4:26:1b:5c:1a:
50:c8:dd:bf:85:b0:f6:5e:ca:70:52:b4:36:26:bb:5e:21:5e:
c0:fa:47:26:5b:e7:bc:88:8a:23:fe:9f:8d:7f:e0:74:4c:72:
c1:d9:8f:c1:0f:3a:d8:0f:cf:31:5b:e5:70:ae:b2:ec:19:1d:
df:39:ec:e7:e6:ff:1f:32:44:9c:aa:ed:cf:c1:68:ea:e3:e1:
93:50:f6:45:66:b3:35:b7:47:48:d0:da:e8:0d:92:0e:a3:06:
6a:7f:b6:cf:b6:69:a5:d4:1c:cd:85:a3:c2:82:65:1f:69:4c:
bd:dd:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:24 2025 by rpki-client