Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: Vie+6FhfUbNJL4qZZJm6CW9SN2IANZPwmRsH77Y3nWc=
Subject key identifier: D8:EE:B8:E9:45:33:5C:AD:AD:E5:42:D1:01:C5:56:58:C9:B9:5E:5A
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 0199FBEAA28C1E3A798FC9656BC1C6F519B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 115C
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: awtGSMlWKPU+0waotDBB4Qw/VI6nb+PtVzSqHIwHxmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:8c:1e:3a:79:8f:c9:65:6b:c1:c6:f5:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=d8eeb8e945335cadade542d101c55658c9b95e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:a7:a1:7a:a0:41:36:76:9b:25:8c:11:9d:
83:89:2d:1f:8e:88:f8:ab:b5:b5:c4:9c:07:b0:ad:
c2:81:ce:b1:35:6e:b4:a1:55:e3:f4:86:e7:8c:06:
d4:34:c5:fb:19:7d:6a:e4:e3:5c:6c:eb:0d:67:c2:
f1:d9:c3:55:42:4c:85:b9:fd:9f:d9:9c:82:05:ae:
1e:8e:8f:71:ec:3b:1f:2c:2f:cd:82:5f:f5:28:31:
5c:bd:20:ed:71:44:60:61:23:77:4b:6c:dd:a4:4f:
fe:31:30:d0:0d:e1:99:36:e0:86:e7:0d:76:24:90:
cf:cf:92:6f:71:88:f7:88:10:fb:18:e5:e2:69:8e:
03:44:01:41:a4:8d:32:49:56:a1:6b:28:48:9e:d6:
dc:92:10:16:6b:43:15:5d:39:b1:70:3a:6e:24:e1:
e0:4d:77:83:74:9a:54:11:3d:ea:11:8b:1b:ec:1e:
4b:e2:55:c9:73:9b:a0:6d:c5:21:9a:31:99:0b:c5:
e3:a9:5b:a9:1d:fc:63:4d:4c:c3:27:2f:35:e1:11:
2b:7c:85:9a:1f:64:37:a3:9d:93:85:33:01:32:30:
70:95:8a:75:9a:e5:1c:ed:cb:5b:7b:82:cd:b7:90:
c8:e7:6e:73:11:1c:61:6e:33:e7:48:a1:fc:22:76:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:B8:E9:45:33:5C:AD:AD:E5:42:D1:01:C5:56:58:C9:B9:5E:5A
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:81:34:7a:e0:af:f8:b0:ee:3b:18:69:cf:01:3a:bd:46:
3f:bd:88:08:e5:b1:98:c2:7c:06:89:c6:0a:25:e4:3a:7f:46:
5b:e5:64:97:83:c9:13:08:6c:b1:d6:bc:5c:fb:09:32:b9:8b:
20:45:37:a6:f0:fd:3b:a7:a8:90:48:a8:d2:d2:93:33:e4:7c:
7b:14:2b:3b:15:41:43:bc:22:8f:21:d1:5a:a4:62:1d:a3:5f:
13:c1:9b:bb:6a:84:a6:25:98:ae:17:22:6b:26:0b:b4:85:11:
f6:63:04:b2:6a:2e:00:10:9c:df:fe:cd:d7:58:fe:27:8b:8a:
57:88:40:41:64:c0:43:b3:6b:5f:b4:68:f0:fb:54:6f:a1:66:
47:1f:80:e7:d4:b8:32:86:74:83:69:f8:3b:b8:51:8f:3c:1e:
82:1f:58:23:f6:ce:02:44:dd:8b:64:f6:6e:2d:8e:f0:1e:bb:
c3:52:4b:59:55:51:86:8a:26:74:40:43:2b:11:ed:65:fb:90:
87:2a:49:6c:30:93:0e:50:14:af:32:60:97:d9:ad:2d:0a:dd:
3b:68:da:d0:b4:5b:57:96:d9:88:59:13:32:31:9a:e8:61:d7:
c8:cf:12:94:42:31:d4:90:11:71:ce:6c:46:e3:3b:df:86:4e:
5c:5e:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:14 2025 by rpki-client