Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: o7rncVZ1z29jbJzGouT/hSBVJB7z7xV4lrq3iiVgn6U=
Subject key identifier: 73:17:50:D1:F5:92:30:B1:1B:24:6C:7E:CC:D0:8F:CD:E8:5C:B5:1D
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019A4EF4E7869C0E35ED077E414EE3B91B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0CB5
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: Et+oTwTJLEoorFASNF0cC4tqk23dQ+QqRisiFdhe+/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e7:86:9c:0e:35:ed:07:7e:41:4e:e3:b9:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=731750d1f59230b11b246c7eccd08fcde85cb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:f9:04:90:c4:12:d0:2a:31:bf:56:7c:49:
42:27:f6:be:1d:cf:0d:eb:d0:f1:ab:e1:6f:90:a3:
2b:f2:2d:f0:f1:e9:8c:2b:3a:8d:ca:54:af:98:7f:
84:a8:4c:4e:6a:25:be:11:3e:eb:b4:af:be:fc:b7:
57:b9:4c:89:9c:c4:c7:52:53:b4:b9:3b:8e:70:2c:
b9:b2:c8:06:b8:f7:0a:34:c3:82:6a:1e:8e:c4:03:
46:92:c6:65:3f:c8:0d:64:07:41:a2:56:a0:a3:82:
47:6c:00:ce:36:cd:76:5d:f2:f4:39:a8:24:b2:44:
67:f2:ad:d0:9c:cb:1c:06:04:29:68:8c:d3:82:df:
c2:fd:c6:04:ea:83:94:76:19:8a:7b:08:13:ee:5c:
32:d3:c9:e9:97:d0:46:24:e7:93:00:78:d7:d4:34:
30:ef:10:25:e0:b1:88:59:45:73:35:c2:fb:85:a7:
e7:c5:98:e7:3d:f8:1e:09:3a:f5:b4:74:94:74:b7:
23:96:f1:91:a4:77:4a:e0:a9:1f:4e:69:55:f4:3c:
ca:d1:0c:b5:0d:bc:ac:b2:45:6c:b8:4a:d7:d0:8a:
bf:13:7b:d7:79:4d:3d:4c:46:cb:12:42:f1:28:07:
5a:f2:2b:fa:7a:ca:6a:98:38:07:a0:c5:27:88:2d:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:17:50:D1:F5:92:30:B1:1B:24:6C:7E:CC:D0:8F:CD:E8:5C:B5:1D
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:a6:ee:5d:82:0a:33:13:d9:9b:56:f4:9c:71:7d:5b:12:
9b:1c:da:94:b6:50:a5:d4:4a:d1:ec:48:46:0c:00:2f:93:2a:
3d:f2:23:d6:8c:c5:06:f1:a7:f3:2e:fc:c0:f8:70:47:81:fc:
af:e8:24:ad:c8:4d:5f:73:38:99:a1:a3:e7:04:79:24:5e:9a:
30:79:99:31:5e:cd:91:0c:d7:bf:c8:08:5f:b6:9c:41:15:b8:
71:d2:b9:ad:7a:b0:b1:cf:c9:3d:8b:13:87:a8:a3:dd:dc:40:
72:56:5e:3f:12:ac:03:80:cc:05:1f:78:51:76:fa:68:01:e2:
8d:35:da:94:45:56:64:db:49:cd:3c:f9:06:b0:fc:67:bb:62:
a2:d4:b5:4a:3d:47:48:da:ae:9e:af:64:e6:a5:84:18:f3:37:
79:eb:b7:07:cd:f3:ef:a2:60:84:b9:2f:0b:e1:62:2b:d4:05:
0a:a4:cf:14:98:31:e2:d4:5a:f4:71:e6:dd:b4:cc:67:ca:cb:
1a:8c:b1:0c:6a:38:e6:53:15:bb:bb:43:b0:d5:f9:a2:bb:c6:
5b:1e:b9:6b:cd:fd:91:bd:7b:68:c6:80:99:25:4d:3e:74:1b:
a0:96:f2:42:13:a6:3a:05:37:19:4b:0c:58:af:97:ec:11:63:
49:17:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:20 2025 by rpki-client