Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
File: jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft (raw, json)
Hash identifier: tCHDR8pvdC/2TZ1WOKDcoPcrvoH2k8cA1YJYiQk3i8U=
Subject key identifier: 23:D6:A3:A4:E7:2E:82:DC:BD:2C:0E:67:31:DC:B5:81:AE:A5:57:AB
Authority key identifier: 8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
Certificate issuer: /CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Certificate serial: 019A71B79404623956B66F41628DEB985DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
Manifest number: 0631
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl (hash: 1f5gf6mcfCxNe6wM6JDgoCY6hsHGOdz6rZyjPLlslT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:94:04:62:39:56:b6:6f:41:62:8d:eb:98:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a4180027d923d9fe0c9570c90b9d1308fa672
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=23d6a3a4e72e82dcbd2c0e6731dcb581aea557ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:95:7e:80:87:e2:fd:b0:79:6a:7a:c2:57:
f6:c1:71:ab:e0:95:48:5b:30:9b:0b:69:77:e6:44:
96:7b:1b:be:79:07:a4:1a:67:c6:d0:65:53:81:e8:
25:4e:2c:7c:99:d6:0a:2a:97:68:85:1f:93:0f:e5:
04:32:0e:f2:5a:82:1d:f6:8b:4a:eb:81:17:5c:18:
87:4f:6f:52:01:6e:4a:a9:da:c2:b3:32:30:2a:a3:
ec:41:ae:d8:c5:8e:4a:ef:93:af:d3:0b:54:db:23:
bd:15:fd:6a:dc:7e:5e:ff:0f:b8:aa:7f:3d:30:a6:
6e:91:fa:c0:5f:e1:a8:47:c5:01:30:7e:7f:52:a2:
02:38:85:2e:16:7b:8d:27:fe:50:4e:8e:f1:72:39:
5b:36:eb:ba:05:65:55:98:73:aa:23:8f:5f:b6:b9:
d5:e1:34:23:0e:39:e8:ec:89:4b:98:e5:2f:2a:94:
88:9d:c8:fb:bc:6b:a9:ae:c6:6c:e8:7c:32:af:06:
e9:f3:87:45:3e:34:90:00:4f:1d:d2:67:1b:e2:c9:
22:7f:ef:4c:c3:9b:85:0f:49:e5:34:76:39:99:17:
ef:a3:dc:25:dc:a3:aa:db:33:a6:25:4a:7c:eb:50:
85:df:c0:ee:2b:3f:5d:62:35:35:73:f3:02:40:bf:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D6:A3:A4:E7:2E:82:DC:BD:2C:0E:67:31:DC:B5:81:AE:A5:57:AB
X509v3 Authority Key Identifier:
keyid:8E:5A:41:80:02:7D:92:3D:9F:E0:C9:57:0C:90:B9:D1:30:8F:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlpBgAJ9kj2f4MlXDJC50TCPpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5900fc-d9e0-4af6-a9e2-5f987e1ec035/1/jlpBgAJ9kj2f4MlXDJC50TCPpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:b6:05:5d:5f:3b:ab:4b:1a:18:85:a8:9f:06:54:e8:22:
0e:02:83:1d:33:13:01:11:9c:54:85:c7:96:5f:01:c7:26:f6:
72:52:8c:65:9f:85:ab:a1:ee:07:65:d0:7e:b8:d5:71:8a:da:
2a:4b:8e:d2:8f:a1:4a:28:77:4a:0a:88:53:01:22:19:a8:33:
19:c7:57:d8:c3:19:0e:01:a6:ef:9d:56:87:10:49:a6:f2:01:
62:26:9f:c9:ff:fe:88:66:30:ca:ed:0e:10:20:eb:f5:f9:c6:
2d:a5:26:f5:0c:1d:89:1f:e1:21:86:7d:ff:64:3d:aa:93:55:
da:fe:61:eb:d4:7a:08:a4:80:4f:ea:c3:f6:38:40:24:92:1a:
c2:0d:7a:b0:1e:66:37:84:88:f8:76:57:68:0b:8a:4a:f8:63:
ac:e9:c1:1e:6e:85:59:98:0d:83:d3:11:43:0e:90:b1:82:85:
35:b0:96:f5:0a:bd:12:0c:35:8c:85:99:e3:01:6b:fe:9d:9f:
cf:3e:14:56:bd:31:80:1b:c1:8e:f5:57:38:2f:1e:f1:3d:64:
ef:cf:e9:74:cc:23:23:f5:8f:ec:18:2f:63:60:74:2d:a5:c9:
e8:b0:ab:8d:a2:d4:fb:05:d2:e4:32:e4:ff:a3:f3:04:84:00:
f5:91:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:18 2025 by rpki-client