Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: N6CJ2vt2AM01bw6IGeTWLv0MWWiVrQHv8p6nYPtzWr0=
Subject key identifier: 2F:F1:F9:2A:47:AA:57:CE:04:7B:4E:88:0D:4E:63:2B:FA:B7:02:75
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 019A714999DE1F389B61DCDE7DC10BC906C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 027D
Signing time: Tue 11 Nov 2025 05:00:40 +0000
Manifest this update: Tue 11 Nov 2025 05:00:40 +0000
Manifest next update: Wed 12 Nov 2025 05:00:40 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: QudowBsrSWlCK+WVA/1LHAgyFfVSLEGTg61qY99teGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:99:de:1f:38:9b:61:dc:de:7d:c1:0b:c9:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Nov 11 05:00:40 2025 GMT
Not After : Nov 12 05:00:40 2025 GMT
Subject: CN=2ff1f92a47aa57ce047b4e880d4e632bfab70275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:f2:df:33:11:5d:a2:5f:a7:5e:a1:90:f7:
4c:16:a9:f7:10:e7:86:b2:fc:da:7f:a1:f7:38:9a:
92:84:fc:df:3b:de:e5:c0:87:ba:c5:41:47:ee:f7:
f0:d9:12:6a:32:8a:01:7a:da:bd:02:4e:04:7e:17:
60:27:ab:27:e6:e5:02:21:8c:0c:4f:26:d9:b5:40:
3f:5b:bf:fe:d7:b5:0c:66:c1:f7:40:95:d3:c5:7f:
82:10:a2:a6:84:f7:c4:e5:47:f9:95:05:06:33:28:
77:33:12:59:65:02:35:0a:3a:25:dd:2f:6a:8d:8e:
f2:c2:20:e5:85:b0:80:90:ab:12:a2:7b:f8:5c:c4:
f5:89:18:7c:b1:9a:e0:39:38:63:2b:0e:d6:66:09:
87:84:1c:5e:98:46:e3:73:0a:07:74:04:6d:86:32:
c0:ae:32:e0:ed:b5:b4:30:c0:e0:f2:18:ce:6b:ee:
86:6b:c4:d6:36:75:ae:39:e4:1f:bf:2f:81:4b:bf:
4d:10:f3:a8:4d:f6:82:a5:77:0c:eb:ae:ff:2f:af:
c8:fd:c0:2b:c2:84:03:ba:dd:c5:eb:6e:0c:86:dd:
3b:d2:99:de:f7:3f:f7:0a:2e:02:f7:1a:49:c0:c2:
2f:a4:bf:c8:86:53:d3:28:79:1c:3c:4f:6f:02:68:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:F9:2A:47:AA:57:CE:04:7B:4E:88:0D:4E:63:2B:FA:B7:02:75
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:2e:32:eb:13:88:df:7b:4a:b6:d0:13:dd:c9:44:27:97:
58:e7:b8:55:6c:59:8b:c1:61:49:17:79:dc:e4:e5:79:83:d5:
6c:c4:3f:3e:8d:0b:65:09:c7:fb:7d:5f:0b:3c:4c:d9:2d:1e:
46:43:a3:1a:1c:24:07:5c:b9:c8:70:5c:ec:b1:de:45:6c:fd:
e2:19:51:92:84:5d:cb:78:8c:13:3e:f7:e1:5f:db:ef:c4:70:
39:f3:31:b3:04:d1:d4:bf:78:38:39:88:25:8d:06:ae:2c:f8:
a5:93:c7:84:7a:67:20:9f:26:12:d1:5e:ad:28:28:26:a1:18:
38:7e:4a:c1:d9:c6:4c:68:c5:a0:21:b2:8a:3f:5e:85:f2:05:
f6:11:f2:44:03:ea:ce:63:b8:6c:38:10:e8:93:f3:66:e7:2b:
0c:4a:55:3f:86:77:bc:89:94:d4:7d:fd:cc:b1:6c:24:72:19:
11:ac:53:e2:3c:34:66:31:d6:09:0c:d0:02:a1:7e:aa:73:d1:
bf:f4:23:06:c7:c1:8d:99:f1:36:cd:8f:7f:8b:d2:92:7d:fc:
f6:c8:87:80:7c:84:1d:c2:c3:30:3c:af:88:f4:cc:3d:dd:a0:
30:ea:5d:02:ee:e9:2b:1a:27:b1:c6:d7:da:fa:c1:94:a5:c6:
cd:0a:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client