Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: 3uPDbAVRYIMKsscKvpe4NJNf8NEQU1m1cl6i+ZWIZ2k=
Subject key identifier: B0:EF:1B:41:D6:C8:8C:05:70:F0:8C:A6:71:40:99:EC:E9:5F:32:02
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 019A4D73C0C89F0989611AF958D4F70FDA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0CF8
Signing time: Tue 04 Nov 2025 06:00:22 +0000
Manifest this update: Tue 04 Nov 2025 06:00:22 +0000
Manifest next update: Wed 05 Nov 2025 06:00:22 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: +lNlzh9si31Eibr+r/aSnLbxOjKsqjvsuXGBZiuao48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c0:c8:9f:09:89:61:1a:f9:58:d4:f7:0f:da:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Nov 4 06:00:22 2025 GMT
Not After : Nov 5 06:00:22 2025 GMT
Subject: CN=b0ef1b41d6c88c0570f08ca6714099ece95f3202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:ff:0d:c8:b8:91:19:3f:2a:b6:95:fc:ac:
ad:70:a9:fe:65:b6:2e:ce:39:e7:cc:85:ff:c5:c5:
2f:a2:ea:5b:d1:05:23:60:33:ea:d0:86:0e:ca:db:
09:1d:8b:73:ee:c7:00:c9:ad:e6:cc:40:4d:41:a8:
55:bc:54:34:b8:f0:9b:f5:27:ed:9d:61:3b:4f:72:
e4:f3:94:9b:7b:d4:58:c3:93:b8:67:70:0b:cb:54:
b6:0e:a9:5b:ac:08:db:bb:8e:01:12:10:88:7c:9a:
d5:97:f4:fe:a9:3a:37:70:4c:31:11:ff:20:54:be:
6d:c7:40:dd:10:1f:b1:02:cf:87:a6:5c:ac:6d:a7:
aa:93:cc:2d:ba:47:28:5e:6e:99:f6:47:8f:d0:c7:
b3:3e:b8:07:b3:e6:4b:1a:7b:d0:1b:62:de:47:cd:
80:24:b0:2e:f1:ee:d8:29:f5:1c:f1:cc:f7:12:91:
6d:8e:7a:59:f0:2b:b3:06:7d:e6:23:ae:c3:b8:b5:
15:35:85:6d:2d:52:0e:1b:f6:95:70:e8:ff:07:90:
2a:e9:69:73:f7:e0:da:23:69:88:21:8e:cc:a9:61:
7a:d7:b0:ac:de:fc:a2:c8:d1:bd:73:58:1c:aa:0e:
83:ea:83:ae:fc:a6:98:cf:68:e0:d2:2d:5b:f1:17:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:1B:41:D6:C8:8C:05:70:F0:8C:A6:71:40:99:EC:E9:5F:32:02
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:3d:55:c0:ce:f3:e6:e4:9c:4b:c9:09:a0:28:08:2b:06:
ca:39:6b:4f:a2:66:24:c8:24:93:5d:fa:ec:20:48:eb:46:05:
42:6b:8b:62:4e:7c:c3:7b:ce:70:a3:91:40:3d:3f:10:c7:b9:
f8:2e:4d:43:91:f5:65:32:a2:af:88:62:3b:4d:7b:7d:e3:74:
23:b7:29:01:08:b7:73:08:74:29:ef:71:61:60:ed:1f:92:0d:
00:fe:16:99:8b:6b:54:92:f6:14:17:e4:bd:c4:fe:41:10:8b:
6d:a7:e4:54:ee:e1:dc:16:3d:fa:90:85:e0:d7:4e:99:cd:c4:
f1:22:24:98:eb:60:ec:fa:d3:fc:9e:fe:83:88:ef:37:2b:93:
77:6f:7d:8d:22:3b:e6:a2:fe:35:7d:a8:ea:5f:4f:d9:3c:b6:
28:b9:a9:c8:ce:1c:6d:28:ae:5e:b8:05:2c:e8:43:82:57:f1:
41:8c:5e:b2:b2:eb:70:d3:57:bf:cc:0b:36:ac:51:6c:37:07:
b7:18:67:b2:fc:e7:7e:86:2a:b7:84:7a:14:69:89:64:37:f1:
25:16:95:79:c8:c5:33:d8:20:54:3f:fa:25:fa:18:bd:05:84:
aa:e7:da:26:8c:3e:93:76:b1:d1:a5:6b:8c:d6:11:fa:dc:03:
f1:20:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:16 2025 by rpki-client