Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: n8WUI6chcBpgT4gj8WnVHMfAtpo6oz2yk7cV6d3qDMw=
Subject key identifier: CA:EE:DF:2E:ED:56:26:25:18:D4:D3:41:4C:A5:30:C2:2D:39:B0:A0
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 019A50E285C0F5BB17380CFC7E8867FB9FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 0EEB
Signing time: Tue 04 Nov 2025 22:00:13 +0000
Manifest this update: Tue 04 Nov 2025 22:00:13 +0000
Manifest next update: Wed 05 Nov 2025 22:00:13 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: QLK4tgD3Bnb14DsteqbIdhMapKxosOnoTYinh+0CS/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:85:c0:f5:bb:17:38:0c:fc:7e:88:67:fb:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Nov 4 22:00:13 2025 GMT
Not After : Nov 5 22:00:13 2025 GMT
Subject: CN=caeedf2eed56262518d4d3414ca530c22d39b0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:2a:44:f1:f4:95:27:73:26:18:38:db:d7:
05:82:ad:ce:ed:2e:de:42:30:c7:33:06:df:44:14:
f4:1a:39:66:5c:a4:05:a3:69:fb:b5:7c:14:d5:2f:
99:01:2c:5b:91:8e:b2:74:a3:03:6e:96:87:1a:db:
a9:4f:88:bf:ea:96:f4:57:d6:dc:6c:77:4d:c3:f8:
fa:e3:41:ba:28:7a:59:3d:9f:68:ba:73:20:1f:3b:
de:ee:41:d9:f1:3f:d8:b5:c6:6c:5d:c9:ff:b7:59:
6c:41:b9:d6:5b:e2:ce:9b:d9:e5:be:12:de:e1:36:
42:cf:60:e9:b7:02:80:62:4e:1b:76:47:58:c0:b9:
01:1d:2f:b8:df:a4:e0:a4:88:77:64:f0:81:47:40:
bb:c6:03:35:03:fd:45:3c:8e:d4:5e:98:18:4a:50:
f6:01:c4:2d:4f:f4:38:d2:cd:c0:f9:ca:b7:25:1f:
0d:59:bd:5c:13:83:77:5d:33:8d:8a:80:e8:30:c8:
16:3a:7a:fc:0c:4b:9e:ca:e5:43:32:2b:82:b3:f4:
18:14:34:67:4e:53:c7:e8:10:16:8d:b0:19:25:3c:
60:d3:d2:26:fa:1f:bd:fb:a9:b8:25:5f:d0:3f:e4:
a4:4c:49:74:e9:74:b5:9c:76:60:5c:74:0b:66:ae:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:DF:2E:ED:56:26:25:18:D4:D3:41:4C:A5:30:C2:2D:39:B0:A0
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:fd:66:07:58:18:97:c4:44:47:e1:ce:45:2c:93:65:ef:
35:26:f4:14:da:77:68:bf:81:1f:1c:71:1a:02:c1:f7:90:1f:
a2:bc:26:39:0e:9c:1f:db:2d:5c:ae:92:d4:d5:9f:e0:a3:58:
46:ce:4c:0e:51:84:16:21:b7:ee:65:2f:44:68:17:29:a9:d1:
ba:94:3c:cf:56:7e:68:91:6f:d2:fc:a5:d8:23:ed:62:63:50:
96:af:74:20:8a:d8:1f:a9:17:2a:96:a2:04:dc:8f:87:d9:77:
be:c2:85:b9:45:b8:3b:8f:7c:a2:06:5c:a6:ab:22:22:60:e1:
97:65:e2:32:98:53:45:ca:17:0d:73:31:4c:65:11:e2:a4:1b:
59:ab:7f:5c:bd:90:0b:5b:c9:ee:ad:9f:4e:ae:32:62:fe:69:
1a:ce:40:b0:4f:3f:f9:4d:81:3f:8c:ef:7a:fa:0b:9b:e5:00:
80:08:5d:b3:73:f9:a7:13:8a:1e:ef:e5:06:b2:02:07:4c:9c:
85:f9:89:b6:2f:72:e8:4d:c9:6c:51:16:39:3e:c6:2b:79:e4:
33:5b:26:f0:17:28:30:93:1e:7f:ef:be:4b:63:e2:29:be:3d:
18:6f:9d:08:a6:1c:83:bd:61:67:68:1e:b6:21:9f:17:86:5f:
0a:c5:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:05:48 2025 by rpki-client