Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
File: j7phV8tS0RaPUIRsXlB5IkDt8-A.mft (raw, json)
Hash identifier: 06NIcr4dSqekzY3jfXrjipXYvoCUbsUAnHn3GwE1nKM=
Subject key identifier: 96:46:74:53:4F:F8:75:73:8C:8A:0F:35:BD:2B:B0:A2:83:76:C3:8B
Authority key identifier: 8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
Certificate issuer: /CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Certificate serial: 0199FC58CEF856CABC67CA79D338AB241F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
Manifest number: 0A12
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: j7phV8tS0RaPUIRsXlB5IkDt8-A.crl (hash: oMP/tjxY4Ng5EVtf2Z+CvanFV15tcbvjcOysTUJFLe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ce:f8:56:ca:bc:67:ca:79:d3:38:ab:24:1f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fba6157cb52d1168f50846c5e50792240edf3e0
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=964674534ff875738c8a0f35bd2bb0a28376c38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:62:ab:d4:ef:18:34:41:ca:ea:f5:3e:21:
5c:d2:1d:9d:1b:6e:9b:0a:d9:c6:8f:d0:ac:3b:64:
d2:60:7f:2a:f0:1e:f2:dd:87:fd:58:74:3b:ac:50:
b7:0a:ca:d8:d8:79:2b:92:ef:25:fe:8e:16:76:12:
3c:64:f1:56:88:ec:ee:9b:f5:bb:92:fb:b9:c9:9c:
01:0e:7a:96:a4:8e:76:02:70:ce:2e:c9:73:bf:d8:
50:af:c2:96:b6:a6:b1:66:4a:59:ec:f8:ea:4b:af:
58:b7:12:7a:e9:ac:17:8d:83:5b:22:9f:1f:55:db:
dc:1f:88:1d:ca:1a:24:d7:ef:cb:8c:ff:f3:b6:2a:
a9:d8:6c:46:e0:dd:27:f6:27:c5:af:90:7b:cb:2d:
f3:3b:b9:7b:e1:32:45:15:ee:45:ba:c1:7e:8c:58:
9a:fc:58:0d:e1:55:75:20:94:01:7a:e3:67:4e:fd:
63:a6:6b:6a:d9:9d:62:92:35:1f:5d:df:92:bb:6e:
2e:e0:f0:fb:f0:d5:cc:70:26:73:e2:e0:9c:14:1d:
ba:9a:e0:a6:32:d6:63:fd:87:19:c8:ab:de:f0:0a:
82:42:16:73:2b:bc:05:5e:6b:33:69:77:1e:b0:b6:
68:6d:dd:00:09:85:ae:21:c9:68:aa:ed:29:c3:d0:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:74:53:4F:F8:75:73:8C:8A:0F:35:BD:2B:B0:A2:83:76:C3:8B
X509v3 Authority Key Identifier:
keyid:8F:BA:61:57:CB:52:D1:16:8F:50:84:6C:5E:50:79:22:40:ED:F3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7phV8tS0RaPUIRsXlB5IkDt8-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e25b63-7b94-4759-9195-20fad94cab14/1/j7phV8tS0RaPUIRsXlB5IkDt8-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f8:86:83:af:5b:7a:cc:36:14:bc:02:16:0d:58:26:a7:ce:
8e:e8:50:3b:35:75:9e:27:63:22:4c:97:56:aa:7a:ef:28:be:
ff:40:ef:79:3b:ef:1a:6d:e7:96:c0:32:0b:11:a4:6d:cc:b1:
47:6e:4d:dc:82:54:69:b3:42:6f:6c:f7:30:f3:61:be:1c:e2:
3b:b2:8e:99:7f:05:f2:97:88:a0:73:6e:10:e8:76:a1:91:db:
57:f6:0a:95:c8:ff:5e:dd:5e:7c:b0:36:ae:64:ba:40:e7:5d:
00:a2:41:a6:99:52:92:48:65:05:1f:7f:79:e4:41:7e:46:a3:
62:08:b6:55:18:f0:e8:93:f8:25:15:bf:82:2f:ea:f3:93:6a:
7e:5f:aa:51:98:f8:4a:97:22:2d:92:53:0e:00:2e:b5:c0:77:
09:2c:79:ed:98:8d:e9:66:d2:5d:ca:8b:01:35:8a:64:6e:4f:
b3:8c:cb:f4:6d:4c:59:30:f3:44:5d:ee:0c:1b:d0:ae:09:cd:
67:7c:3b:14:4f:f8:5d:ba:88:4d:16:33:ca:3f:a0:e9:38:54:
f6:00:1d:34:ed:44:8d:24:91:7c:7b:95:41:cc:3e:aa:96:e0:
a5:b7:fa:7b:08:0d:88:07:a8:94:a3:03:9d:71:78:3c:31:2a:
f9:49:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:13 2025 by rpki-client