Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier: 7cixGAsrCPFemcvuCNsEIG32diWxcFbatkpnt0QDGgg=
Subject key identifier: E0:22:5A:B6:9D:79:2C:BD:07:6E:02:BD:1F:D2:5F:46:79:11:98:1F
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial: 019A72257AE6F7FC3DEB4727C8C0C8DCCED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number: 11D1
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: yc0DeANI4qvzEfVXKpmaB8QB7xHmNtIsO8t3tBmX128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7a:e6:f7:fc:3d:eb:47:27:c8:c0:c8:dc:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=e0225ab69d792cbd076e02bd1fd25f467911981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:6e:a0:7e:d4:23:35:ad:14:4c:34:75:32:
a0:c3:bf:73:2b:58:6b:1d:20:47:35:33:25:31:75:
03:67:af:6a:3c:f5:26:a9:e4:99:65:50:af:a0:23:
46:8d:9d:b3:12:48:c5:d6:d1:9d:cd:5e:c0:70:d6:
ae:fa:53:7d:85:85:01:f3:69:1b:f1:7c:4c:77:3d:
86:f8:f2:50:3c:4c:d7:51:6b:54:dd:06:4e:e9:b8:
60:88:66:63:58:1d:4f:7e:e6:34:ef:d9:b9:9b:45:
6a:90:09:74:b4:d0:dd:36:e0:85:e8:42:44:9f:1b:
28:e6:9e:27:35:25:1d:5e:78:da:b9:69:89:88:1d:
d5:da:12:e9:a4:91:f8:2a:d9:d7:cc:24:00:a1:5f:
5b:a5:dc:bb:b5:ac:3f:82:a7:5e:99:a9:20:cc:03:
80:04:ad:94:8f:82:f8:72:09:56:9b:47:98:e6:a4:
29:fb:0b:1e:1b:3e:bf:88:25:49:e1:3d:3f:0b:0b:
d3:dc:de:12:43:eb:85:81:af:55:b2:e9:ae:3a:ef:
1d:1f:11:71:9f:0e:1b:cb:ea:9d:68:7d:8b:46:7a:
e5:6b:d3:4a:e2:65:74:e4:05:b1:be:83:d2:64:a1:
21:89:77:5c:1b:c1:79:ae:5f:bd:5a:e8:19:2e:ef:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:22:5A:B6:9D:79:2C:BD:07:6E:02:BD:1F:D2:5F:46:79:11:98:1F
X509v3 Authority Key Identifier:
keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4b:80:c7:b6:e9:bb:ea:80:c0:6a:2a:c0:0c:f9:f4:da:c7:
31:4b:49:d8:11:36:31:4a:3c:9c:6d:5c:26:dd:09:c3:af:22:
f9:14:57:ff:5e:b1:ee:b0:58:7b:10:df:0c:0f:03:3c:73:61:
00:e9:16:8a:8f:17:62:ff:60:32:d2:f4:4b:4a:4f:45:b9:dd:
e1:79:ea:9e:90:6a:2d:46:19:eb:79:99:ad:43:2a:88:77:2d:
81:47:03:82:9d:b7:5f:fd:a9:3c:eb:e5:eb:42:70:ab:ab:ff:
87:dc:04:52:c9:60:d7:f2:4d:2d:c8:2e:8e:95:61:71:8b:b7:
32:e3:2f:b5:0e:bb:d8:ec:3a:bc:62:51:3f:4f:c1:1b:68:87:
f1:e5:e7:78:e6:13:ab:94:5f:be:c2:5a:66:03:fb:fd:f3:81:
0b:e4:ce:59:69:8b:e6:dc:61:c5:73:3a:14:10:67:cb:3c:a9:
04:76:ae:44:4b:03:66:8c:5d:8f:93:f4:2c:09:fc:1c:af:95:
ec:7b:2d:a7:c5:98:0d:67:31:65:cf:eb:82:71:76:cd:e8:3f:
d8:f1:f1:29:75:aa:91:28:61:a8:8b:7a:9e:07:c8:a7:fb:4b:
3e:c7:4e:c2:8c:f1:92:70:15:40:2b:18:8f:45:9a:10:b9:2a:
1f:f8:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:30 2025 by rpki-client