Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: F3Jd0fTOm6FxCpHI7hvQgDxrvvoyi40E/kxi37N6ViU=
Subject key identifier: AD:8F:1F:EC:C4:22:4D:1D:3D:14:A9:2E:BD:6B:3E:B4:D5:A6:75:11
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 019A4F9990C45E21BB2F01F791B6B1758007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:55 +0000
Manifest this update: Tue 04 Nov 2025 16:00:55 +0000
Manifest next update: Wed 05 Nov 2025 16:00:55 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: mWtHv6KGrwVhC2zwwEAZAJpiOyZQwtVZtkVHG5uLEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:90:c4:5e:21:bb:2f:01:f7:91:b6:b1:75:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Nov 4 16:00:55 2025 GMT
Not After : Nov 5 16:00:55 2025 GMT
Subject: CN=ad8f1fecc4224d1d3d14a92ebd6b3eb4d5a67511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:05:eb:0c:f8:6e:e6:4a:c4:9b:85:32:70:
bc:84:51:89:02:1b:e4:e4:50:f5:ec:ca:0e:e6:a0:
f1:4f:49:d9:ae:d2:51:e7:d3:d2:f1:18:1b:8f:95:
e3:ae:0e:26:1b:b4:b8:7a:06:fd:71:df:5c:62:73:
b6:ea:47:ac:1b:bb:85:47:a3:9b:b7:1e:c1:69:91:
22:8f:65:90:df:ba:31:f5:b9:73:10:9c:ef:b4:e7:
ff:81:68:be:12:e7:ca:00:6c:4b:d1:54:14:2e:de:
35:b3:57:9c:68:60:4f:7e:b7:2e:ec:0f:b4:9d:e2:
5a:1d:fd:ee:4b:7c:56:e7:a2:d3:47:c0:ea:26:ba:
cb:3f:60:22:af:4d:18:30:4c:35:a3:0f:64:46:a4:
26:70:d7:1e:ee:81:85:9f:41:28:93:8a:f1:ae:93:
b0:4e:1a:3b:9a:5c:a9:c5:3f:fe:12:53:e6:7d:17:
e7:82:c7:9c:32:62:72:15:03:0a:ee:51:c7:9f:c3:
22:4f:5f:ca:17:4f:f2:6a:6a:66:63:aa:03:ab:02:
4f:2e:65:19:a4:67:24:70:73:72:2a:09:f1:16:ac:
f2:4d:64:27:4d:ee:8f:3a:b5:90:dd:22:71:d9:cd:
e4:aa:ba:61:c0:f1:fe:bb:95:02:d2:59:e7:19:07:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:1F:EC:C4:22:4D:1D:3D:14:A9:2E:BD:6B:3E:B4:D5:A6:75:11
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:06:62:9f:70:59:a9:d3:a7:9b:70:ff:94:4c:42:d7:8d:87:
3e:fd:b4:29:70:f2:de:ff:4b:f2:ff:6c:2d:40:98:16:fd:01:
67:1e:fc:fd:55:7c:f1:8c:27:36:6d:d7:b9:c0:ed:cb:d4:e6:
c3:af:af:1e:5c:5a:69:72:d8:96:a6:4a:ac:26:37:83:19:76:
0a:e9:2d:ba:5a:5f:ae:0a:a1:7f:dd:0a:8d:9e:df:d8:cb:f3:
66:9f:3e:d8:f0:55:e2:d4:68:32:8c:21:f2:0d:bf:c4:23:18:
76:ae:45:8d:19:5a:f2:6c:91:35:70:2b:b8:bd:53:70:f0:a3:
66:79:c9:a6:c0:76:d5:8c:d7:51:20:60:72:07:83:e9:46:e3:
2d:d6:46:45:0b:49:1c:05:22:e7:ea:02:e2:b7:f9:59:fa:ec:
ff:f8:96:00:17:e3:a3:85:64:be:16:bc:79:c1:bf:c2:13:d5:
bd:22:1e:c1:07:40:59:ec:70:b4:5a:0e:7b:c3:14:7a:8d:7e:
65:b5:a2:46:ab:8e:0b:32:da:99:5c:c2:17:f5:b3:ce:51:57:
01:9f:4f:e7:92:2b:e1:e0:b9:0f:9b:33:5e:9c:71:3f:3a:c7:
d2:6c:ab:5e:a4:1f:72:fc:83:25:04:10:1e:2f:61:0c:39:bb:
f0:a5:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:01 2025 by rpki-client