
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File: rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier: 7xym8ZX6p5XeoeEh15A6n9a0e4pZWijj9NK6XhnqKWY=
Subject key identifier: 50:0C:18:94:C1:BE:8E:16:29:25:95:43:59:9E:6A:D6:E0:A4:62:ED
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer: /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial: 019A4FD000335E68E1C47659796735F3F867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: z9C1+0NBO8E6JS4c+/ZYZChQczJjuH53NBM16ntufWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:00:33:5e:68:e1:c4:76:59:79:67:35:f3:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=500c1894c1be8e1629259543599e6ad6e0a462ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:93:cb:0e:75:9f:ba:ad:eb:7c:89:e2:e4:
d0:21:bc:db:fb:ee:08:74:ed:18:0d:4d:f8:78:78:
af:8e:ab:84:b5:51:f8:b2:82:ae:bb:7b:d8:35:a3:
40:0d:b9:ec:79:76:09:8e:3a:db:a7:62:d2:47:3c:
d5:dc:94:99:3a:df:b2:ef:dc:e4:03:12:94:ed:b7:
79:30:b9:df:2b:5d:50:f4:5c:58:5b:1f:20:ca:e0:
87:48:9b:bf:10:1a:2b:4c:50:68:d0:72:4c:4c:b2:
ed:a7:5d:01:f8:09:b5:4b:2c:f4:e6:c7:01:0b:bb:
17:7e:29:72:44:17:a3:48:17:2c:53:26:ec:30:cf:
86:4a:a8:dc:57:2b:47:bf:37:a9:b1:a3:a0:cc:8a:
cc:36:40:5f:b5:61:78:86:74:d4:90:37:5c:07:59:
36:1f:ab:13:3d:9e:c5:d8:c2:49:53:11:5e:4d:49:
d2:fd:85:f0:55:c0:54:47:cf:94:a0:0e:f5:d8:b6:
64:5e:97:3f:9c:82:12:91:46:d8:42:fb:8e:0a:98:
a0:56:36:74:d6:61:1a:6e:c0:82:d5:d7:99:8b:eb:
be:15:8b:4c:94:c1:41:26:83:9d:9a:34:f6:21:3c:
bf:89:48:c9:e9:a5:83:42:f4:7e:c7:d3:65:ad:72:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:18:94:C1:BE:8E:16:29:25:95:43:59:9E:6A:D6:E0:A4:62:ED
X509v3 Authority Key Identifier:
keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:5b:9a:70:77:ab:e8:d0:08:bd:9a:58:68:51:04:33:24:
e8:f3:26:7e:d9:78:22:39:de:f3:fd:ab:bf:20:d4:12:44:f9:
ce:76:79:4f:8e:03:dd:35:23:2c:48:b3:aa:6a:4d:26:26:a4:
bc:24:e8:5c:05:45:1d:49:05:68:bf:75:f2:f2:f1:1d:0e:b7:
b1:ad:23:e5:af:a6:38:f4:95:34:a2:ac:10:cc:86:2e:ff:73:
b8:0b:3e:b9:b1:e6:0b:dd:bf:ca:ad:06:43:5e:00:2f:b8:d8:
72:fc:2b:46:9a:4a:ec:78:38:a5:ea:94:ed:16:05:b7:5e:34:
25:ed:e5:31:68:e7:1c:08:a2:c0:d8:48:b4:80:2b:ae:7d:da:
ef:19:49:e0:0e:65:e8:e6:6d:8a:23:74:b1:07:23:a7:4b:c2:
2b:d4:25:58:a3:94:7f:86:2a:85:c3:70:91:52:f4:d5:50:05:
8b:e8:5e:c9:8a:3e:75:b6:b0:d6:1a:dc:6e:36:28:d7:c4:90:
19:37:a3:8c:4f:8a:f7:2a:b4:bb:66:50:ba:a5:6b:dd:ab:4f:
a6:26:e7:c8:f9:1f:e7:28:68:69:80:7c:fa:96:1e:4a:a9:a9:
53:3e:80:6a:d4:a7:01:85:6c:07:21:99:b1:59:10:80:f0:e7:
fc:73:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:18 2025 by rpki-client