Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File: j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier: u7arEyezJLN0Ce6PAfeMO7PkVT3ngIbGectcmlb3Tmk=
Subject key identifier: 5D:C5:C9:5C:73:D5:EA:F5:ED:93:55:3C:C6:EA:F1:32:ED:45:BC:48
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer: /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial: 019A503DFBCC8712B4186F33C198E0035B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number: 0797
Signing time: Tue 04 Nov 2025 19:00:30 +0000
Manifest this update: Tue 04 Nov 2025 19:00:30 +0000
Manifest next update: Wed 05 Nov 2025 19:00:30 +0000
Files and hashes: 1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: mALgns0av+abptnynRqq8Vqzlrok4pBMUnR5hXNc4hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fb:cc:87:12:b4:18:6f:33:c1:98:e0:03:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
Validity
Not Before: Nov 4 19:00:30 2025 GMT
Not After : Nov 5 19:00:30 2025 GMT
Subject: CN=5dc5c95c73d5eaf5ed93553cc6eaf132ed45bc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:bf:56:e0:89:c3:ee:c5:9f:6a:38:21:9d:
20:d3:a6:a7:3e:d4:d3:91:07:3e:c2:0e:23:fe:9f:
15:16:ec:9d:d0:34:14:13:42:08:91:a9:9f:4a:08:
d9:2e:54:e6:47:8d:d8:cb:5f:65:26:c4:f7:2b:06:
2c:de:de:1a:6c:4b:dd:22:67:da:91:f8:f9:fa:13:
35:a3:0a:22:49:0a:f4:51:b8:b1:fc:d5:a1:e0:46:
6b:5b:31:24:d8:08:84:59:0a:d7:ab:24:0b:1c:27:
e6:2a:5e:bb:fe:fe:2b:ba:56:e9:c8:f3:ef:cf:d7:
d2:0d:dc:1f:33:f7:cb:0e:f3:17:fb:99:53:5c:45:
26:2a:47:50:ea:3e:07:11:69:75:c0:3e:f9:87:70:
d8:ae:60:cf:6a:21:b0:f9:e5:b7:29:d3:75:38:15:
55:8e:20:dc:c4:5d:dc:3c:6b:c9:f9:71:a5:4a:c2:
df:13:38:8e:5b:65:02:1c:93:0c:06:7b:ff:35:99:
e9:4a:70:6a:cd:19:a7:79:24:17:6b:09:41:2d:4e:
be:14:d1:25:c7:1c:da:2e:c0:df:62:46:01:a3:c5:
8b:7f:66:7f:73:2d:eb:0a:48:de:36:0d:9b:fa:83:
f5:08:f9:1b:9a:d5:6e:6c:6c:74:ba:72:f5:fc:ca:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:C9:5C:73:D5:EA:F5:ED:93:55:3C:C6:EA:F1:32:ED:45:BC:48
X509v3 Authority Key Identifier:
keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:bc:8b:1c:83:c5:ae:ad:70:b5:35:b6:2e:2e:15:8e:e0:
51:86:64:31:e2:f4:8c:8c:d7:47:9b:ad:41:d3:a6:f3:a9:22:
2f:06:b0:08:b0:2c:95:17:26:97:34:ec:40:94:31:32:10:d0:
e8:0c:7e:d8:aa:5c:fd:fa:46:11:22:d9:6a:42:e2:b0:f9:9d:
0d:9d:e1:ec:00:43:4d:8d:d1:3a:e8:f0:9f:db:dd:ee:be:98:
87:ea:84:4a:40:83:0b:9e:85:d1:05:cf:2a:e8:fb:02:d7:1e:
53:73:07:0b:42:39:89:34:8c:46:b6:00:8b:94:b8:06:6d:c2:
fc:8e:e6:f1:a2:7d:57:b0:57:2f:03:b6:02:72:75:bf:b2:b7:
a9:6a:fa:79:ac:b5:a8:f2:12:02:b1:21:18:1c:18:ed:1a:a6:
e9:45:89:bd:49:ba:64:b9:86:b1:fd:cb:37:d4:9f:eb:6b:43:
0b:52:24:66:19:14:4e:7e:c5:cb:ea:3e:10:f6:e1:58:c5:17:
12:0b:96:71:8c:7b:e9:f2:3c:3d:ae:df:08:cd:b1:79:8d:33:
3d:8b:bb:59:a8:fc:ca:8f:4c:b3:95:ab:b5:72:8d:b7:d6:78:
57:e1:a4:76:a2:81:9d:97:07:0e:2c:da:ed:1e:0c:a6:17:5d:
a3:af:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:48 2025 by rpki-client