Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: hl34KkKJiPVmxs6TWXJthJAe5zmSSpP6s9bQ2TKgyfE=
Subject key identifier: 8A:CE:D0:10:5C:40:BA:16:CA:56:0E:F4:FA:1E:A3:BF:0A:23:13:BF
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 019A4F61FFAEE428BE51D7AD4DABFFD89536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 1089
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: dL4CGyPPYOUx9ob+TIOVzC/y/MzmRt7urMZZpH7zSaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ff:ae:e4:28:be:51:d7:ad:4d:ab:ff:d8:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=8aced0105c40ba16ca560ef4fa1ea3bf0a2313bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:a6:e0:d1:26:e2:41:06:09:f0:ce:4b:c0:
f1:e1:e7:25:c7:20:21:1d:bb:9d:df:2c:86:93:47:
fa:c9:38:ca:53:19:bf:08:6c:cf:eb:d2:c1:a5:53:
0a:3d:9a:35:85:ea:5f:79:ad:b1:d9:ab:68:7b:85:
d2:b3:1b:91:d7:56:5a:40:cf:bc:32:46:32:e9:10:
df:63:48:3d:ca:a7:ab:bc:a5:5d:69:9f:cb:ee:f0:
bc:b2:40:fe:02:49:bc:84:9a:04:4e:86:b0:71:5c:
45:4c:46:11:c6:c9:15:81:b1:fd:43:96:94:5e:e6:
75:8b:6e:12:af:92:3f:2f:6b:20:ef:06:1a:26:1b:
17:73:54:e1:e3:f1:17:5b:47:6e:ac:99:8a:e3:1e:
48:38:3b:82:9b:74:f7:c8:1b:26:97:b8:c4:8e:f7:
6d:37:83:9e:27:41:51:22:80:e0:0b:73:14:9e:74:
3c:85:5c:f7:d0:c3:9d:b4:76:59:bd:cd:0b:f6:08:
21:8a:7f:b7:85:7d:44:bf:44:7e:01:57:b7:cf:d0:
e7:b9:55:34:99:58:b5:a4:36:23:4e:03:c5:9f:d3:
fd:44:92:50:48:ec:66:33:9e:22:c0:d1:7c:24:8a:
c0:56:6e:8f:9e:92:71:98:c0:17:bc:b0:8b:c0:8d:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:D0:10:5C:40:BA:16:CA:56:0E:F4:FA:1E:A3:BF:0A:23:13:BF
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f9:c5:2d:33:6a:16:6c:a2:c8:61:6f:eb:61:fc:c1:61:15:
dd:ff:06:2e:04:63:df:16:14:f0:e9:4d:90:fd:8e:23:b5:32:
c8:82:80:db:bd:d4:9b:80:8c:9e:77:b2:fc:1c:0e:cb:24:a3:
8a:96:d3:c1:07:69:6d:34:9f:29:7a:b8:e6:d3:40:aa:9c:3f:
6d:2f:46:7d:36:4f:e1:30:30:9e:8f:21:75:4e:69:cf:bd:5a:
46:c2:d9:1a:72:99:1c:fd:af:00:b6:16:6f:0d:a2:d7:29:bd:
13:19:b5:58:9b:c5:f4:65:05:20:bf:14:23:a0:96:d2:e8:c4:
f0:5f:16:ce:3b:8f:f5:af:ca:8c:71:ac:42:ae:c7:ca:a0:ce:
a0:9e:98:80:a7:18:71:23:f0:bb:b4:70:3b:69:6b:a0:0f:77:
3f:2a:38:4b:68:1f:3e:c2:33:eb:b5:3f:7d:b5:2f:97:d9:e3:
ac:03:31:91:6c:b1:cf:79:bd:87:6e:b8:d7:71:09:f1:ba:e1:
6a:89:fc:d7:f9:59:41:8e:6b:52:f7:56:17:00:fa:22:3c:2e:
a8:c4:b4:59:e7:0f:51:5d:83:3e:bc:37:21:58:b3:0d:9e:d4:
4d:29:81:5a:e2:dd:e8:56:35:6d:05:92:de:c7:0c:b5:d9:8d:
c8:b1:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:51 2025 by rpki-client