Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: AlU8AghMm7AMA84YRO5VRoUFCJjgnIiCLn+bq8cFvqs=
Subject key identifier: 94:C5:A9:32:6C:62:A8:3D:CB:79:E2:95:D1:D3:4B:4E:3F:7C:83:40
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 019A71B782ADB595FCC8B396C81F8F7C92A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: QK3wPP5MkO/HwuNgpyUzkoleXx/YN3UzAS1QEbfBlBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:82:ad:b5:95:fc:c8:b3:96:c8:1f:8f:7c:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=94c5a9326c62a83dcb79e295d1d34b4e3f7c8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:f2:c5:2e:97:83:48:93:15:54:af:d7:66:
5d:7d:68:ca:c6:60:04:e5:97:a4:19:e9:5e:f3:55:
5d:a6:a1:f8:b8:10:86:d7:5a:6e:43:49:aa:28:5b:
7d:ed:42:33:8f:ac:c1:b4:73:67:b2:fd:4e:5a:33:
ac:ea:62:52:30:1f:3d:0c:f1:7e:ca:55:36:97:fb:
ae:8d:7a:a1:d9:89:a2:7b:94:31:ea:a1:92:70:77:
36:37:63:43:25:be:a4:a0:9b:b3:04:05:c9:fa:ac:
31:59:93:4d:92:72:7b:e0:cc:14:9d:79:bc:ec:85:
a9:ce:d9:94:2b:54:29:72:db:91:9f:bb:76:c1:7e:
d1:79:4f:2b:02:1f:df:d6:f4:c4:bd:ec:6a:6a:f0:
30:97:fe:48:8d:12:53:c8:2a:0f:76:5b:bc:e1:b6:
d2:51:72:e8:3f:88:a6:b1:36:c8:c5:be:5f:f1:9d:
0a:6c:e4:42:65:33:c9:7d:75:31:38:f3:00:2c:ae:
29:60:99:84:b2:6d:53:d6:4a:4b:42:55:f7:27:6f:
6a:0c:8e:fe:e8:18:d1:d5:e1:91:89:41:33:1c:58:
77:da:6d:83:16:aa:72:df:ff:53:05:07:e0:b1:26:
5f:1c:ec:f6:4a:43:62:97:ae:7c:01:09:eb:1a:a4:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:A9:32:6C:62:A8:3D:CB:79:E2:95:D1:D3:4B:4E:3F:7C:83:40
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:bf:90:97:b6:4d:cd:37:81:48:08:e8:fc:80:0c:e1:52:
28:ab:29:2a:e4:39:53:fd:fc:c9:5a:29:5f:8b:a6:32:80:6a:
33:92:b2:02:ed:fc:fd:f8:c1:f5:f3:02:b3:54:0e:40:48:45:
a3:ac:dc:33:d0:99:88:cd:b5:5b:e0:53:f4:aa:af:93:c6:cf:
b0:10:66:79:5d:59:cc:3e:de:96:a1:d8:05:58:24:a7:ac:24:
8b:8d:a9:b7:10:3b:79:a5:62:2d:f9:73:ba:ea:e0:ec:22:89:
ce:df:b5:0d:20:25:f6:b8:ed:e5:6d:cb:7c:b1:23:3a:c0:58:
55:f4:2e:41:ff:55:dd:9a:5f:c2:7b:37:02:6e:46:0d:34:5d:
3b:97:14:57:ba:e9:00:a6:43:1e:d3:a9:7d:41:55:c3:63:6a:
cd:63:8e:24:7a:4a:6a:fc:d8:62:b7:10:55:2a:25:a0:c8:3b:
0e:87:71:48:e5:47:ad:5c:aa:3d:41:d5:bf:14:27:1b:1d:8f:
2d:52:15:8e:cd:86:3d:c2:12:be:79:ef:23:e2:d3:50:54:a3:
b9:da:3a:2d:fb:9f:b3:b8:2b:e0:f8:56:8f:1f:b7:99:03:3b:
76:45:a6:8c:23:39:a5:85:31:c4:09:0a:b0:ed:3e:55:b1:7e:
74:fe:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:43 2025 by rpki-client