Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: SEz0cNrxu2SzI4rxtAiFoD7v0pmFuPa9ByRpCAZknJk=
Subject key identifier: 45:53:27:3B:FC:55:B4:2A:60:B4:95:66:5B:45:E9:86:30:D5:57:EA
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 019A4EF41D9AFC8F58990EE4D288AD4FAB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0927
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: tbeZZns8ia14erJTMlsN54qFeA5OGM4IFxvIl+lT2r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1d:9a:fc:8f:58:99:0e:e4:d2:88:ad:4f:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=4553273bfc55b42a60b495665b45e98630d557ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:20:85:ee:27:c1:86:d7:d3:cf:70:fc:b4:
9e:b1:af:e8:a7:94:30:9c:29:24:a9:c2:7d:5f:2b:
bb:2f:c5:66:a9:08:23:c6:35:5d:3a:a8:12:de:7e:
83:ac:24:1e:ef:e2:c9:bd:ee:a9:dc:b3:5e:12:5d:
fa:76:39:f3:85:ef:50:13:37:af:da:f2:f7:11:c3:
ab:7d:9e:cb:1c:2f:e8:42:ee:63:c1:a0:2c:12:58:
48:16:6a:68:ba:1f:f8:20:de:86:7e:84:ac:86:32:
89:fe:54:8f:d4:35:85:51:4e:83:3f:08:d9:a9:21:
d8:a7:17:34:93:e4:65:ea:9b:5d:fe:ca:5c:1f:91:
21:0b:f9:49:95:d2:ff:c0:29:ce:3b:e4:d2:fc:b9:
ff:6a:fe:e3:69:5f:6b:84:43:16:a1:4b:28:12:1c:
45:5e:06:1b:d0:fa:1a:4d:75:41:a8:7d:99:25:be:
d2:09:be:eb:d4:de:05:15:be:5a:37:7c:04:3e:7b:
3f:3a:79:ee:f5:61:7c:f7:d6:ef:1c:0e:b4:78:d2:
73:e5:41:6f:43:55:ff:30:6b:ca:cd:0a:df:4f:d1:
4e:59:7c:64:ce:65:3d:4e:d8:66:88:88:e7:8d:ed:
c7:2a:b5:d1:24:81:8d:3b:d9:f9:5a:ec:7f:ba:3a:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:27:3B:FC:55:B4:2A:60:B4:95:66:5B:45:E9:86:30:D5:57:EA
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:71:cc:02:50:7f:88:3b:13:cd:91:4f:3d:65:27:59:3a:
a7:61:a1:6b:06:30:53:29:e5:12:1f:12:ee:db:40:e6:37:3e:
65:09:48:7a:68:3b:b3:62:d5:5a:1c:90:35:33:b8:a9:08:6c:
26:f6:24:c7:fc:a6:50:9a:4f:0f:77:c7:0b:5a:1e:f6:21:36:
a7:40:b3:1d:bc:9a:92:4a:c9:ca:0d:9a:85:db:7c:1a:9a:54:
f2:6f:a5:5d:65:d4:3c:a5:29:65:91:d9:19:b6:cf:21:67:2c:
c8:11:3c:67:df:55:60:25:06:91:95:c0:4e:9d:4d:7c:3c:73:
b9:80:76:3b:fc:d0:d2:94:5d:ef:db:90:01:c0:63:09:55:75:
ca:11:d1:ea:26:dc:c7:1d:f6:5d:6a:83:5d:26:3a:34:21:52:
2e:05:72:8f:d1:85:cf:9a:7c:f3:be:e5:f6:49:18:9c:df:e8:
d2:fa:c3:cf:8a:4f:9e:2f:d4:a3:c0:57:bf:3e:48:45:1c:30:
df:8a:c8:b6:be:93:f1:e2:a2:da:89:c6:f6:b5:d1:21:38:17:
51:73:93:d6:cd:45:0b:8c:b1:44:05:4a:b5:7e:8c:cc:dd:09:
d1:73:8d:5d:b1:69:c8:e5:9f:26:41:59:15:e0:f8:c4:3b:8d:
0f:50:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:31 2025 by rpki-client