Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier: tRFf1ZX0ItDLfXLvma9TtxwAMcKXaQ1zWHjt06XSGKo=
Subject key identifier: 85:45:75:05:81:F6:22:A8:5F:8F:A4:2C:07:9C:1F:AD:D2:A2:53:C0
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial: 019A4D3CD445D348A1E72CFF428B15FFB45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number: 045C
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: zAjn6S6e0AFZKjHk0C7shVg2txDINImjPf+hbDTmEKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d4:45:d3:48:a1:e7:2c:ff:42:8b:15:ff:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=8545750581f622a85f8fa42c079c1fadd2a253c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:84:cb:8f:59:d5:6b:93:0b:b8:18:5d:03:
18:20:99:14:11:0f:b4:e9:bc:07:f4:04:36:60:8c:
d9:85:19:bc:5e:a1:19:4f:b2:2d:e2:81:0f:c5:fb:
4e:94:5d:9e:82:32:b5:2d:ae:d2:bf:30:7f:4b:a9:
fe:95:c8:ba:d4:b5:85:cc:a0:05:bf:5a:61:4f:59:
76:9a:29:4e:f2:db:7a:71:da:31:5a:f4:26:cb:2e:
0a:45:d4:36:37:5b:72:e9:3d:e6:22:f0:83:d4:82:
ee:f7:00:39:28:f6:bf:8d:1f:66:77:5f:ce:68:e1:
1c:91:05:09:8b:6e:ab:de:f0:c1:38:6f:55:9b:94:
87:8b:4d:7d:5c:13:a2:61:ea:31:8c:45:c2:ed:9c:
1b:b3:a8:c5:dd:52:c3:60:cb:37:25:e1:61:7d:20:
9f:af:8c:2b:7c:72:6c:aa:95:c4:24:b0:86:b1:b1:
08:dc:78:b7:a5:05:87:77:90:4c:77:fa:13:12:a0:
a7:7a:ba:63:28:ed:d7:d0:a2:7e:03:e0:25:fc:6e:
ed:a0:13:f6:c3:8e:64:3e:f1:d9:c7:56:0c:08:31:
44:87:18:05:d8:76:dc:48:60:c8:44:91:95:61:64:
e6:eb:4d:4e:25:bf:62:0d:2c:8f:74:cb:4b:03:55:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:45:75:05:81:F6:22:A8:5F:8F:A4:2C:07:9C:1F:AD:D2:A2:53:C0
X509v3 Authority Key Identifier:
keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:4e:f6:5b:bc:54:02:66:cf:d3:47:f1:69:fd:08:57:8b:
c6:26:12:25:fe:ff:18:e5:bb:c0:dd:a5:32:2b:bf:d9:f7:4c:
41:23:bc:b7:28:c9:7c:74:ea:64:34:a8:1c:8c:69:4c:cf:be:
40:a8:a8:61:c9:b1:8f:72:90:4c:c8:a0:3b:8f:52:6e:5c:39:
62:fa:84:1d:7f:57:cf:f6:74:b1:91:5d:c2:fd:c8:3c:cd:7d:
e1:33:58:a6:86:2e:58:c7:1c:28:45:79:c7:8b:bd:94:1a:ba:
7a:af:02:8e:f7:06:f4:47:a8:ef:ee:d2:87:b2:e5:03:d5:1c:
4f:35:4a:93:39:f7:01:37:8b:78:61:f6:5a:bf:07:9e:5f:da:
dc:7e:06:38:18:8f:c4:3d:fe:a3:28:c3:fd:63:75:a6:65:57:
a2:75:8a:42:06:c2:85:e3:24:0d:c8:e0:4a:cd:50:65:f3:2d:
79:5d:17:8a:64:c8:3b:c8:49:78:e3:02:ab:67:11:67:4a:d0:
54:6d:85:55:02:81:a3:23:03:80:0d:14:d7:69:67:49:99:bf:
b5:8d:e3:ae:60:8d:be:04:20:de:1d:65:55:cc:8b:a3:05:9b:
09:d6:24:60:1c:a2:49:be:8d:25:6e:d4:cc:1c:47:ea:b4:ca:
bd:eb:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client