Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: fBjNEEr59Cj1EhXJfoBn5XM5xnMt5Va2MXQfPrmQNnU=
Subject key identifier: 14:4B:A4:22:71:9D:33:53:E8:1A:06:D3:A2:E6:C5:B1:D2:DC:68:C5
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019A4EF59D4F29069065E0A2AF042DCE5DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: Xn8U5H+FJeJC6yvClYtYRaqh6XcqQfz3Wdt9YUyiONs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9d:4f:29:06:90:65:e0:a2:af:04:2d:ce:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=144ba422719d3353e81a06d3a2e6c5b1d2dc68c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:01:ca:ff:92:23:83:ab:86:fa:15:7d:61:
dd:50:8c:1c:f1:9a:9e:9d:f6:72:a5:4d:3b:66:41:
cd:d6:cc:4d:21:67:1c:fa:24:81:b2:cd:41:35:bf:
bf:94:d2:d9:7b:b0:c4:e0:db:f7:9f:86:dc:b7:83:
0c:6f:b1:6f:67:77:bd:77:f2:a4:6a:71:f4:12:4c:
b8:14:8c:07:90:5d:2c:c9:02:29:4c:c8:e2:fa:c7:
05:bf:8f:29:e1:e3:58:39:03:9d:b4:9b:14:d9:57:
2b:7a:8c:d7:57:c9:50:48:78:af:8e:72:0f:99:be:
58:c5:fc:8c:52:a6:66:9e:ca:29:68:e6:c3:b9:49:
3e:4a:f3:fa:12:3b:25:1c:6f:f5:77:9c:cf:71:19:
05:49:05:1a:52:c1:46:93:3e:03:85:46:f5:99:69:
43:9b:1e:92:1f:4a:58:25:49:e2:83:9f:b9:d5:54:
83:d7:7f:69:39:64:bd:9a:5f:00:ed:e1:ca:89:88:
1a:01:75:35:4e:07:9b:54:93:99:51:45:7d:cc:38:
d2:e5:01:80:a2:30:70:18:95:1a:67:f5:11:bd:ae:
b8:1b:41:29:44:c5:d4:d6:9d:f8:30:de:f3:be:82:
a6:06:b1:a1:92:ae:36:35:a0:6b:aa:c5:d5:fd:78:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:A4:22:71:9D:33:53:E8:1A:06:D3:A2:E6:C5:B1:D2:DC:68:C5
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:74:70:06:25:7e:81:5e:f9:d4:9f:57:43:56:d0:ef:fa:49:
4d:38:b9:08:ed:b3:80:a5:4b:c3:ca:84:31:f4:3d:0a:d2:7d:
c8:34:59:3f:77:f3:66:b8:07:07:79:1f:bc:a7:7b:28:29:bd:
75:33:40:75:fc:a2:e4:93:66:92:f1:f4:6a:ca:65:2b:5e:9a:
19:7a:b5:52:8e:12:98:2e:65:73:93:d0:0c:25:a2:26:21:bf:
70:14:1f:c5:02:89:fb:ec:42:c8:bf:8b:c2:e3:0e:cf:9a:ef:
3a:e8:e7:3e:51:e2:8b:28:6d:de:fa:82:05:06:45:cd:81:ab:
71:8d:cc:a0:0f:00:fc:bc:d5:3b:8f:b3:9c:24:8a:ef:36:21:
67:10:2b:6c:46:a9:03:88:56:b4:c2:2d:a7:73:b6:26:ef:af:
0b:b9:4d:36:cb:5e:ac:cd:fc:3e:77:0f:4a:87:6a:71:1f:28:
71:37:8b:07:03:d4:d8:5a:32:5f:1c:e0:e7:26:6a:ed:90:ed:
f0:93:79:70:10:d5:96:c6:65:d3:76:7b:55:e6:e5:ce:42:4c:
21:c7:6c:ff:80:c2:3a:c6:f8:40:55:06:b0:7c:7a:87:01:4e:
6d:35:87:8b:51:a7:f0:55:84:27:f9:b1:a5:26:1b:dd:94:50:
19:00:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:03 2025 by rpki-client