Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: mCqMiEanpXlKkGabB7eU0ctiaZZa2Nh6RE7Q+n5Q4ME=
Subject key identifier: B0:30:0F:6C:C8:EE:5C:E7:C4:22:40:D2:9F:BF:FC:65:DD:68:D7:0C
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 019A73A6035DBCC7BFF9A2D18AE836EE7095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 08B6
Signing time: Tue 11 Nov 2025 16:00:50 +0000
Manifest this update: Tue 11 Nov 2025 16:00:50 +0000
Manifest next update: Wed 12 Nov 2025 16:00:50 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: wEwmxxBtZghP0yWSUxTZYzP2LSNJ1XtPd7vySy971gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:03:5d:bc:c7:bf:f9:a2:d1:8a:e8:36:ee:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Nov 11 16:00:50 2025 GMT
Not After : Nov 12 16:00:50 2025 GMT
Subject: CN=b0300f6cc8ee5ce7c42240d29fbffc65dd68d70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:91:04:ae:a3:a4:52:ce:25:7f:f6:f4:1c:
1c:c0:87:62:a6:8e:fe:74:be:9d:16:3c:45:ef:d0:
2a:d3:30:06:da:a2:26:4f:18:e8:71:75:de:22:e6:
3b:25:07:21:d7:a4:8c:50:69:da:ee:67:76:7d:14:
9b:b7:f9:4a:4b:d8:76:3b:2b:76:93:81:5d:23:38:
e9:7e:96:41:44:ed:ec:54:a1:48:9d:c0:4f:3d:04:
10:c4:58:fe:8b:dd:ed:30:7f:2b:91:5a:b4:e8:c8:
f7:74:91:78:c8:28:4a:16:b1:12:d2:aa:64:3b:51:
f6:55:b3:b6:b3:5c:8a:be:34:8e:a4:3b:37:a0:fc:
68:45:c0:05:56:f1:76:2c:cc:f0:d0:9a:56:b9:96:
39:01:95:4d:1d:0c:19:e5:11:5f:8f:c9:0c:aa:56:
83:7e:10:2e:04:f2:3b:2f:ab:27:82:31:96:84:63:
63:42:32:e0:71:5c:70:df:b6:e9:c0:e0:40:9b:dd:
9d:8c:e6:f1:b3:38:35:a6:40:47:59:80:6e:8a:35:
2c:40:99:a1:4f:bc:af:e1:fe:e8:e0:68:07:4f:06:
76:40:d0:d4:16:81:47:d1:23:a5:4e:50:51:84:86:
2e:2f:b1:de:56:f9:30:ff:16:a4:5e:8f:e3:33:55:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:0F:6C:C8:EE:5C:E7:C4:22:40:D2:9F:BF:FC:65:DD:68:D7:0C
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:57:a9:b2:50:ae:a8:7d:91:01:ff:01:a7:23:37:c2:ba:b3:
fc:1a:84:90:51:b2:46:07:b8:6c:04:e0:7a:2e:80:0e:9b:e1:
c1:8c:71:11:94:b9:1d:c5:10:d5:e0:45:24:3e:6e:8c:6e:f6:
2d:a1:14:45:24:6a:40:b5:72:38:7b:62:c4:17:52:28:34:8b:
d2:99:c0:18:cd:21:dc:c2:1a:d3:06:9a:1b:38:64:23:00:b2:
32:e2:6e:e8:6d:6f:b0:80:22:0d:20:5c:f3:7b:db:98:78:8f:
24:5d:6d:b5:a4:b4:13:31:f4:c9:62:5f:c2:e2:39:fb:b9:47:
0e:ad:20:b5:5a:ec:f1:4d:a1:f2:eb:4d:ca:7b:ab:52:e0:9e:
7f:89:ef:cb:f1:c7:c5:6c:79:50:da:06:62:06:c8:d7:6e:99:
fc:8a:ef:29:63:f9:7e:9c:57:8b:05:ce:c1:16:05:14:3d:35:
d5:05:46:00:8f:9c:12:13:df:72:76:a6:63:7e:e9:8e:d1:7c:
87:cc:26:f1:5c:ac:b0:13:46:bd:c3:ef:1d:78:77:ca:2a:e6:
81:03:91:67:ff:14:62:0a:d5:e4:dd:aa:d4:d9:3b:76:56:91:
21:09:61:a6:7a:26:b2:bd:5d:13:a8:25:48:1a:9a:e7:8e:e3:
a2:33:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:50 2025 by rpki-client