Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File: j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier: U1WdB65o/uBQKoXb+TeEIf5KGzkzbXR8pnkxD1hKXoQ=
Subject key identifier: 22:BA:8D:26:A7:77:DE:4E:88:AC:90:E3:B4:F7:D4:96:7D:22:77:9E
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer: /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial: 019A4EF55F7BE5FB70815632F3BE4BDD7373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: jhpXANipN5YOkF4+UKqm6H4gmhT2TsYTIzKQf8h+D9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5f:7b:e5:fb:70:81:56:32:f3:be:4b:dd:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=22ba8d26a777de4e88ac90e3b4f7d4967d22779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:72:7c:77:86:cb:1f:c7:af:4d:a2:07:ac:
4a:d9:3c:e7:6a:60:c6:07:aa:20:a7:6a:11:0b:d7:
b8:ea:3b:3a:81:0b:bf:aa:86:a2:27:6a:ae:81:61:
2f:bd:48:7e:32:8a:b8:03:2c:27:29:10:f0:24:b3:
20:f1:9a:bb:48:89:05:74:d3:d5:e1:67:6f:7f:f1:
3e:a8:5b:63:a3:3c:ad:a1:63:f3:8e:3f:11:bc:fd:
80:40:76:2f:3f:4c:a7:d6:5e:b8:94:6c:3b:29:3b:
69:36:c7:0b:d1:80:10:fa:f3:48:d6:6c:74:14:d2:
e8:1d:83:0d:f9:4e:80:9f:27:27:2a:1c:04:32:75:
15:a0:b4:c2:71:83:a7:ca:92:fd:e5:fe:63:f6:11:
80:c0:7e:19:2f:88:72:85:b7:88:9b:29:29:d4:35:
dc:cd:91:21:6c:04:15:95:d9:5d:df:11:f6:4e:ea:
57:aa:14:d8:9b:89:b2:af:0d:b2:ef:35:48:1d:7a:
ef:97:27:d8:84:48:20:f8:6a:c1:eb:c2:ba:63:2c:
99:42:e2:e0:dc:a2:a7:3e:11:a0:50:f3:4d:39:e7:
7e:ef:12:b7:09:c2:3e:59:6b:1e:53:0d:28:1b:a2:
3b:ba:93:18:be:d5:fe:c0:05:b6:41:2b:4e:e7:97:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:8D:26:A7:77:DE:4E:88:AC:90:E3:B4:F7:D4:96:7D:22:77:9E
X509v3 Authority Key Identifier:
keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9d:a1:85:fa:b7:60:d0:c4:6b:87:de:9c:45:b5:6f:05:56:
d6:ed:76:9c:98:94:c4:a0:ec:c2:85:c1:bc:c7:b1:bc:2d:1e:
13:50:b4:ac:3d:af:96:e1:2e:ab:9a:0d:57:5a:b6:14:f6:f7:
22:d4:e8:4d:fe:f9:85:5f:34:68:83:30:39:82:c7:74:0e:8e:
9b:b8:e6:22:e3:f2:d7:2d:6c:1f:ab:bc:91:a5:28:8e:81:4f:
ce:c3:13:b1:ad:c7:68:5b:c8:fe:a5:7c:ef:c0:74:01:16:a0:
6f:83:29:59:e3:d5:93:3d:8f:c8:28:e5:95:80:87:34:0c:b0:
4c:0b:3b:a4:aa:b6:57:f8:20:cc:cc:6f:13:99:bf:a2:ce:42:
e4:ae:33:70:92:a6:e3:18:3f:36:77:4a:28:8b:a8:6d:06:fc:
b4:06:d1:57:7e:c3:2f:23:c4:f4:9a:1e:93:b4:be:d5:66:f0:
6c:5c:10:e7:b9:f8:3c:d6:a1:1b:15:6e:14:d1:55:71:0e:96:
04:48:4d:f2:bd:a9:aa:78:66:c4:cb:00:34:ba:ea:0a:5c:9f:
de:ac:fd:35:c4:af:13:fe:c5:1e:13:b0:4c:a9:1d:3a:b2:8e:
cf:b6:3f:03:bc:a2:98:ed:22:39:b6:d4:c0:fd:b3:dc:7d:53:
68:a5:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:40 2025 by rpki-client