Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: Nb63xlBqyPINfJ/pDpbteAyXXLTYtx5O+KjmAptlVlY=
Subject key identifier: B6:7B:FA:32:01:6E:26:C2:DE:C1:4B:BD:57:74:F8:F3:76:B0:1B:1F
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 0199FDD948A1CA08BE12BF60CA8B9557273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 05D9
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: uFGdvEBOX+uxUVymqzDmuqNjDQF+gFRF0GE+zhbkSyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:48:a1:ca:08:be:12:bf:60:ca:8b:95:57:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=b67bfa32016e26c2dec14bbd5774f8f376b01b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:50:37:9d:b4:ff:8f:f5:bb:ee:0a:b8:35:
86:44:f1:a5:b7:1d:73:43:f6:d9:f5:b3:c4:0f:d0:
f7:cb:c3:a7:42:15:2b:10:8a:c3:cf:8b:f7:0f:07:
2e:d7:1d:a0:25:4a:79:72:ef:bc:00:42:2e:52:40:
8b:fe:82:ff:77:f2:bf:37:63:67:98:56:da:78:dd:
93:d5:9c:9e:d9:e4:0c:3f:66:28:1b:ac:e6:c2:97:
8d:3f:22:19:e9:34:da:39:07:5c:a6:52:9e:60:d2:
a7:f1:98:e0:e3:31:22:17:19:bd:98:61:27:6a:69:
58:74:4f:57:c1:91:25:22:c7:6b:d4:6f:c9:60:15:
18:da:94:04:17:86:9c:15:46:7c:2a:9d:ac:56:90:
5f:fc:38:bc:c6:af:dd:9e:32:7d:e0:a4:67:32:b4:
1f:21:d8:1b:b4:b0:84:5e:dd:69:26:32:b5:cf:5f:
e8:4f:16:26:36:9a:3a:75:f8:99:d3:4a:a0:8c:e8:
fe:8b:97:5a:2b:e7:46:66:a5:9f:3b:2b:df:82:fb:
8b:82:03:48:1b:70:2f:cb:5b:c5:87:16:8e:55:55:
51:fa:a4:f2:7a:06:59:09:10:38:34:a7:32:67:13:
89:73:ef:ab:40:3f:7c:51:01:78:55:63:7e:ef:9c:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:FA:32:01:6E:26:C2:DE:C1:4B:BD:57:74:F8:F3:76:B0:1B:1F
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:7a:c8:60:f5:d2:56:90:12:5b:b1:24:76:04:70:ec:ea:
da:4e:e2:95:23:57:7b:8d:c9:88:6c:a7:c5:68:87:97:0a:9f:
76:33:4e:86:80:36:0f:16:2b:dd:d0:21:43:96:30:69:15:52:
45:87:b8:9e:f4:51:23:75:95:8d:6e:ba:69:14:a6:49:fb:9b:
80:57:1f:e9:c9:6b:18:3d:35:82:57:e9:41:7b:b1:61:37:64:
74:8c:67:ed:ee:2f:60:42:12:18:85:c5:c6:c4:ef:3d:15:4a:
2c:84:91:f6:65:c3:b8:e6:f8:32:f7:83:65:a0:34:31:c0:77:
b3:8c:23:86:29:dd:a3:7a:70:03:96:a8:cf:f0:75:29:70:4c:
18:0c:a7:5a:fc:aa:9b:6c:89:f2:e3:06:4c:40:bd:90:bd:08:
3f:11:3e:b3:24:97:fc:00:45:46:12:5c:26:7d:85:e6:15:3b:
26:c2:74:4e:1b:13:57:f4:b8:74:d1:9b:54:05:26:b8:50:4b:
1b:22:c5:2d:c9:8e:84:44:69:f3:0f:fd:f3:eb:a8:38:ee:b1:
fa:6e:48:2e:77:0d:06:cb:88:5b:19:7f:2d:7f:bf:b2:ac:2c:
8d:e2:6f:3f:cd:74:f5:d8:14:16:60:c8:f1:a1:7e:40:e1:b3:
c0:37:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:09 2025 by rpki-client