Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: 6Ah/JxVr7GxBVP6pqdwiCYvgcIkG1ezO/LhnfwITcFg=
Subject key identifier: 38:11:C9:B2:FA:10:B0:5B:E5:D4:7F:C8:BF:3B:97:6D:85:FF:D3:39
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 019A71B8C55F5A32F294669D1733BA3CF44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: Y6+7uaEBfOOWxQoMQxgxIK0ikKSVXDuez61VrBUHWhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c5:5f:5a:32:f2:94:66:9d:17:33:ba:3c:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=3811c9b2fa10b05be5d47fc8bf3b976d85ffd339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:88:7e:90:b5:59:15:a8:3e:ed:6a:00:68:a1:
dd:be:44:03:6a:74:5e:d8:13:88:af:48:7d:fa:b8:
db:a1:31:10:25:0b:b9:37:d6:b0:6e:e2:d9:6c:2e:
99:76:cc:34:f6:bb:d5:fc:02:43:10:57:cf:64:98:
56:fc:61:a8:e9:c7:c6:70:a5:87:84:a0:ed:fc:52:
ff:f3:76:11:68:65:fd:37:b0:a2:6f:a4:74:35:11:
e6:0e:80:31:5b:22:50:65:22:6e:8b:44:83:9d:c6:
43:55:48:ad:4b:a7:03:62:c8:33:dc:39:ef:44:92:
b1:81:68:17:36:f2:59:2a:3e:8c:d1:35:9e:73:3b:
39:fd:5d:8f:d6:c9:c7:2c:55:0d:37:01:ca:71:d0:
fa:bb:b5:c2:c0:f6:16:86:3d:6c:f0:d0:7f:cd:d4:
18:d1:a0:7a:4f:22:84:1e:24:6d:37:8f:8a:91:69:
d5:4e:ef:1a:da:1c:44:09:ee:e7:cc:ba:16:34:b1:
89:29:3f:0b:ce:5f:5a:93:e9:ae:f6:97:e3:45:d1:
1a:fa:27:f1:15:e3:5e:be:b3:4e:1e:b2:17:d0:78:
90:6d:cc:f1:3c:92:33:af:a2:0b:a1:84:0b:ab:04:
0e:36:98:48:63:4a:0d:9f:21:78:9c:67:df:6a:d3:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:C9:B2:FA:10:B0:5B:E5:D4:7F:C8:BF:3B:97:6D:85:FF:D3:39
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:52:b4:0a:8b:45:b1:ab:fe:ed:e9:de:e9:4e:41:c9:13:
3c:b8:29:7e:aa:e1:86:2a:e3:54:f4:ca:ff:1c:91:c9:54:61:
92:74:12:88:1a:bb:67:ef:c1:27:d8:2b:48:dd:13:d4:e3:51:
52:e3:81:4b:cd:03:9e:a2:79:90:15:18:ef:28:8e:ef:72:6d:
d3:1a:50:ca:fe:85:a5:a3:03:09:d6:89:f7:38:15:9a:d2:9e:
5c:2e:b5:13:e6:14:18:ae:0b:71:fe:e0:4d:b7:38:b8:84:25:
3a:91:be:66:88:e0:77:a0:7b:58:5d:1b:9d:50:1d:a2:db:c8:
da:1f:ff:d9:81:56:b9:80:60:d7:fd:b1:cf:d2:bd:39:3e:41:
ed:fb:68:09:62:67:36:77:0b:4a:80:fa:1f:52:f6:34:ac:04:
dc:73:08:7b:6e:15:98:f9:1e:c8:17:74:c1:96:57:da:38:ce:
21:a3:c6:55:2e:46:5f:7b:34:2c:2e:79:65:01:68:f6:c6:55:
3f:a2:b1:f4:3e:a3:e3:54:31:7c:1d:d1:73:36:dd:22:18:6f:
8f:17:b9:b5:c4:2f:61:61:39:41:3a:87:8f:57:a1:7a:ac:be:
c2:be:be:1b:da:9a:f6:48:b1:79:06:ec:14:07:e1:13:8c:ba:
a6:11:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:22 2025 by rpki-client