Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: adS4NrB2Lk0imxgHBWfXKokBCQnKXHMIfe/dTu0ZoCc=
Subject key identifier: 1E:03:E7:EA:11:D6:A9:65:4E:3D:51:CD:57:B8:92:AE:53:52:D7:9E
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 019A71EE9BDF697544F7CA51E07ABE8A1CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 1253
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: CJHi2y168OX2lVEFGSH84P8tWOAxnX3cREh8xKUXe7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9b:df:69:75:44:f7:ca:51:e0:7a:be:8a:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=1e03e7ea11d6a9654e3d51cd57b892ae5352d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:f8:5a:b5:78:be:c8:99:65:e1:35:72:3b:
33:00:1e:33:03:01:1e:49:d6:4b:19:ad:c9:d0:e9:
93:06:21:c3:a0:e5:d8:58:6c:55:15:00:fa:ee:ba:
97:4c:98:0c:af:72:89:a1:aa:99:35:44:2c:6e:97:
bc:59:6f:32:f0:8c:78:15:c6:cc:4d:66:4d:ac:c1:
9d:fb:aa:b6:ce:31:84:7c:19:c6:fd:bc:fa:9a:70:
dd:e4:bb:1c:81:78:c4:a3:fa:a0:e2:c6:0a:36:6b:
5d:3b:77:3e:9b:d9:e0:23:94:32:78:e3:bd:d9:1c:
1a:b9:0c:eb:d6:03:df:75:86:ef:7c:6e:16:ea:15:
ab:ae:7d:04:0a:24:66:a6:4a:12:a1:da:3b:eb:14:
ca:72:1f:b3:83:9d:df:38:6d:8e:4f:84:b4:ce:d2:
1c:bf:37:1e:af:47:42:14:87:d5:56:c2:13:a5:bb:
6e:8b:61:a2:23:2f:f5:3f:d5:60:cc:f2:97:d8:f4:
94:3a:4d:fc:81:dc:d9:84:0b:d4:cb:75:d0:62:79:
bb:da:cc:68:fc:de:4e:fe:af:04:12:f9:d2:ef:0c:
0c:be:00:26:a2:b0:cc:ca:0a:a3:01:37:ea:33:e9:
12:c8:dc:39:78:98:b7:47:4d:1d:f2:0c:e4:7c:75:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:E7:EA:11:D6:A9:65:4E:3D:51:CD:57:B8:92:AE:53:52:D7:9E
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:a5:0f:ed:ca:cb:58:05:c7:ff:ef:49:cf:7e:c1:4c:bf:
41:61:ab:de:62:12:49:53:ef:9b:1d:39:f6:56:5b:b5:a2:37:
89:d4:91:15:d2:26:c6:c5:44:5f:7e:24:51:b4:aa:84:3c:91:
2b:f8:88:43:61:3a:80:91:a5:57:3b:ba:52:2c:ce:b3:41:3e:
59:cf:6d:6e:fe:dc:b4:e5:e6:ad:fe:bc:92:2e:1c:85:98:84:
bc:0d:05:ae:f5:fb:59:6b:69:66:9b:7c:33:bd:cc:d0:6b:1d:
d2:63:2d:9c:ba:be:83:69:6e:71:63:cf:ac:3d:1d:f6:f7:95:
44:ed:bb:ef:f2:4f:ea:64:24:30:d1:51:f7:01:1d:26:de:86:
ac:cd:e9:0d:23:3b:71:de:09:77:49:00:48:2c:e9:66:ea:74:
bb:8a:c1:39:80:cd:45:fa:44:23:06:71:d0:ab:23:e6:4e:ae:
e3:f1:85:a2:78:c9:1f:92:8f:a3:dd:61:d1:b8:14:e8:35:a9:
11:c7:07:93:68:5b:08:e0:3c:da:e6:40:12:06:cb:03:22:1b:
53:09:21:b0:3a:3e:19:c8:39:8a:67:71:c2:3d:8b:12:d3:ac:
a7:e4:35:d5:18:c5:95:24:4a:57:fd:72:14:c1:d3:c5:78:55:
05:2f:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:08 2025 by rpki-client