Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier: qgmLPOoVW0AFKolDLDlGkxVERV05p+gYipP/KgjNS0s=
Subject key identifier: 21:A5:9B:A6:1C:F8:5D:A0:9F:A4:DC:7B:3C:08:72:E7:87:B6:C6:5D
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial: 019A71B7ED83D24A04E5CA402D8EFFBB2C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number: 09FF
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: m1IqosK/wQDJ98FWuKit3w0A2LmJKEMtJ72Qg2u0Lsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ed:83:d2:4a:04:e5:ca:40:2d:8e:ff:bb:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=21a59ba61cf85da09fa4dc7b3c0872e787b6c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:75:4d:05:4b:0a:1a:fd:ef:fc:d9:5e:ca:
4f:de:fd:0f:70:fd:12:1c:a2:25:a6:1a:f2:ea:30:
8a:56:42:e6:03:3b:ed:93:34:34:41:a8:a3:48:c6:
ad:39:ed:42:23:d3:6f:c7:2f:b3:b0:73:14:51:f8:
ff:05:32:76:dd:bf:2b:b3:7e:14:4e:a3:cd:5d:e4:
89:0c:ca:49:dc:f2:7b:5a:b9:8e:55:f7:3a:a4:89:
c6:3b:86:9a:3b:3b:92:64:9d:8c:63:66:37:81:3d:
b5:75:74:94:5b:1d:99:9f:61:a1:d9:e2:68:64:c4:
4b:5d:3c:70:67:5a:66:07:2e:b2:99:5a:c9:36:fc:
74:5f:69:d0:b1:7a:c0:9a:f4:dd:18:9d:51:53:80:
d2:1f:3d:01:e4:a3:82:81:94:0e:7c:74:0a:bc:4b:
15:31:0b:6c:4d:6f:67:74:35:88:21:6f:b5:1a:bc:
bf:0b:07:ba:09:9e:de:26:f6:b8:3d:35:bc:26:ee:
58:55:b8:4c:31:4d:03:af:e6:18:c5:33:0e:08:90:
c6:1b:fd:2e:ee:e0:c7:09:15:20:7c:f5:cd:4a:58:
c6:01:29:45:ff:59:78:7b:78:29:0b:36:86:08:0b:
e1:72:e6:62:28:e3:7d:42:ec:ac:77:38:e8:cc:06:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A5:9B:A6:1C:F8:5D:A0:9F:A4:DC:7B:3C:08:72:E7:87:B6:C6:5D
X509v3 Authority Key Identifier:
keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:7d:bd:a0:81:8c:38:8f:74:36:6e:3a:e2:22:ef:55:6a:
ec:01:a7:61:a2:14:59:c2:89:77:f3:1b:88:bc:f2:92:d9:fc:
4a:f4:e9:2c:61:86:9a:59:0c:a0:6e:53:68:5d:de:87:4c:b3:
6a:99:84:9b:ea:d2:7d:76:77:5b:ce:2f:f2:8a:07:d9:7e:d4:
d8:9e:68:81:56:b9:af:b9:b6:6a:59:9c:da:cc:2f:c7:c9:94:
d0:ca:cf:ba:4f:3c:68:b5:31:72:8f:f9:12:e2:fe:b2:1a:4f:
d1:4c:ac:20:c3:a8:d3:27:88:32:25:dc:3c:79:1e:70:d4:75:
5a:52:2f:59:b5:98:8f:a9:6c:b2:36:e6:9c:be:9b:65:cf:c8:
38:4b:69:a5:9b:75:12:12:ac:ee:f8:48:08:a1:cb:fb:7e:41:
8a:0f:55:14:f5:f2:de:0f:09:ba:67:4a:a5:ef:08:7f:ff:d8:
dc:35:65:c2:58:7e:e5:83:79:03:37:8c:bb:69:26:ca:3f:fd:
3b:0e:a6:4c:79:17:49:4d:e8:84:01:9f:dd:1b:a5:88:46:65:
a8:ae:f7:18:a4:07:6a:b4:2a:a8:9a:1c:e1:04:49:b3:23:2c:
c6:f5:01:75:92:9a:06:73:ad:dd:4f:dc:0c:cf:7d:8d:4d:48:
9b:dd:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client