
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File: jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier: Y1B3KxbkDXnys5pgA/qoINQiN9y8PGBpSiIYnnvvDT8=
Subject key identifier: B7:52:74:7E:88:5D:25:D8:B9:DF:40:04:B2:6B:2C:85:44:26:6C:AC
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer: /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial: 019A4EF5C9D9601605EC87D592978A29F09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number: 07FC
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: ip93E1IVEO/hQl6U+LujqkvJvGrLozKki1ZOPb7+a3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c9:d9:60:16:05:ec:87:d5:92:97:8a:29:f0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=b752747e885d25d8b9df4004b26b2c8544266cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:7d:7a:6a:87:f5:39:8b:a1:23:16:16:51:
fb:46:3d:04:f9:74:2b:23:06:e6:ae:2c:b2:05:71:
7a:33:6f:16:f0:d3:cf:40:23:66:0a:61:17:fd:6b:
59:f1:2e:1e:2a:ed:59:8f:5b:36:4e:72:e8:2d:1c:
8e:a7:af:2d:0e:b7:7c:b2:f8:00:23:78:7e:0b:be:
7e:b7:c9:92:8b:58:95:f2:b4:41:b2:f0:1f:39:2f:
f2:0f:f8:d8:18:f7:cf:f7:a1:37:f2:ad:9d:2a:98:
c5:96:ff:ae:49:80:97:11:7e:4c:82:e6:37:02:47:
26:3e:08:69:b8:75:46:a9:eb:4e:58:66:b8:22:8e:
c0:f5:69:bb:63:96:23:ef:71:b9:2e:f1:b0:00:a3:
ca:a0:b1:44:12:2f:43:6f:78:4a:0e:79:18:c4:2a:
fd:9f:3f:27:4c:2d:23:b5:56:29:86:db:d9:14:be:
18:6b:e1:cb:b8:89:1a:e2:76:ba:5d:48:aa:bd:f8:
c5:b3:f7:9b:60:9e:42:5e:69:b2:01:9c:24:6b:25:
a7:01:76:1d:64:7a:2c:0d:06:fa:29:5e:53:a9:ce:
f5:bd:4e:e0:07:95:f0:17:ba:df:84:4b:ef:b5:35:
e8:5c:13:b8:14:a1:dc:f7:c3:2f:f8:de:e6:c9:e2:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:74:7E:88:5D:25:D8:B9:DF:40:04:B2:6B:2C:85:44:26:6C:AC
X509v3 Authority Key Identifier:
keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:01:e0:50:d8:f1:14:e9:9b:40:cb:f0:2a:21:db:da:ef:58:
d3:76:9b:51:7b:07:9a:dc:91:81:cc:60:3b:51:24:ad:82:64:
98:b0:6e:a7:c2:95:7d:ec:36:14:97:01:7d:6c:38:54:c4:18:
1e:ca:74:7b:ed:db:e4:59:09:a5:59:8c:44:32:e4:99:3d:06:
49:75:2c:f9:77:b5:38:e1:02:25:71:61:ec:1e:9d:c7:bc:0d:
0b:3b:73:92:e0:b7:2a:d3:38:14:c5:99:79:38:56:46:5a:41:
89:ba:18:b0:76:97:ec:fc:8c:8c:31:0f:d8:e2:f5:50:db:ee:
86:c5:59:6c:e7:30:b4:14:ee:1a:e6:ad:3f:73:34:a4:22:bb:
a5:22:98:92:62:46:4d:37:c1:13:d6:3f:8a:6b:03:6e:66:c2:
1b:d6:e4:5c:40:8d:11:33:1c:f0:18:22:63:47:b9:11:19:a5:
ca:9c:4e:d0:2f:98:a5:8a:91:49:97:85:09:2d:05:39:c0:ed:
98:5c:19:f3:76:e2:fa:75:4e:14:83:d8:27:c6:68:fd:b1:68:
bd:30:09:01:09:71:23:e1:52:10:df:1a:a6:8b:4c:c7:35:51:
d5:e7:70:e9:d8:ad:9f:11:aa:a7:fe:a8:f1:0f:29:f4:a6:57:
10:e6:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:11 2025 by rpki-client