Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: KPTeBRQjzqYtWTuTlG7JN5/Fb4BdFmwh62eOWd3FM0E=
Subject key identifier: 6F:55:EC:BE:33:28:5E:34:41:AD:FF:5D:B3:62:6D:EF:69:AD:C6:78
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019A71B7F5B14F2710B47980D40AF6E2C21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: vJwMqvFG9qG4qxd6Val7ZTltJ0Ght9nxj4Ex/mJx1nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f5:b1:4f:27:10:b4:79:80:d4:0a:f6:e2:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=6f55ecbe33285e3441adff5db3626def69adc678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:06:c6:d8:87:0d:93:a4:9a:ac:8b:4b:7a:
f8:23:14:8e:e0:19:56:4d:2c:07:20:6a:73:85:fb:
50:c5:e3:d4:46:17:1a:4a:a0:ff:13:32:e1:cd:c0:
9c:12:5e:8b:62:3b:9d:82:cc:5e:8a:05:a4:3e:53:
ed:6a:52:16:8b:c3:07:93:3c:4d:bd:ca:66:20:f2:
c9:a1:17:1f:b2:86:b9:95:7c:72:a0:8c:47:60:c7:
b7:85:e3:d1:d9:6c:15:95:67:cc:23:87:5e:43:a6:
aa:f8:c1:38:b9:64:c9:cf:42:25:82:2a:25:77:ef:
84:28:17:72:d7:73:a3:63:64:38:aa:df:fc:43:22:
8b:d6:ad:31:20:7a:eb:e0:fe:7b:24:4b:72:6f:f6:
73:b0:d1:6c:f5:13:56:da:e4:01:3b:ce:73:b3:92:
bb:2f:98:d5:ca:43:84:b7:62:dd:77:5f:ec:50:6f:
ef:f4:46:eb:6a:33:e9:3b:ef:2e:dc:58:1a:63:9a:
e7:0b:34:ba:33:ec:7d:e8:65:15:c6:9f:fe:75:37:
e0:66:d6:ed:d6:46:c6:a2:ab:5d:35:cd:fb:dd:44:
c9:f7:aa:ab:c5:08:0b:b7:aa:be:93:1d:2b:b2:cc:
f0:fd:f8:0e:3d:f9:be:58:51:9c:58:b1:72:d5:3a:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:EC:BE:33:28:5E:34:41:AD:FF:5D:B3:62:6D:EF:69:AD:C6:78
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:81:f2:73:46:c2:89:ae:2c:a0:9d:1e:4a:b6:a8:61:88:1a:
20:82:6d:3e:d7:b5:53:3c:f3:cd:77:96:f2:65:40:90:b4:31:
90:f3:55:a0:ef:45:55:39:87:41:a8:cb:26:84:b7:08:47:d6:
01:88:c1:87:4a:68:40:92:a4:e7:db:63:ea:00:68:93:7b:14:
ac:83:ca:3e:64:90:8a:4e:70:9d:a0:ca:67:fc:a8:5d:f5:09:
2d:ca:46:23:db:45:64:6a:40:86:4a:a3:48:7b:6d:81:18:fd:
aa:ec:72:f2:cc:51:a8:8a:9c:51:06:78:ee:0e:7b:81:c3:b6:
90:3c:ec:65:d2:f6:2a:33:34:68:53:20:6d:e2:50:04:d9:bc:
d1:1b:ac:2e:7a:3f:8d:15:42:a3:ed:3b:89:6f:65:50:fc:a9:
1c:6e:93:0d:61:f3:9a:0b:bf:99:7a:fb:dc:93:13:35:3f:7a:
0a:57:70:6d:d0:87:35:ed:19:77:4b:e8:9d:04:0c:e1:79:35:
21:79:3e:68:a1:92:6b:3c:55:3d:0f:f2:94:d5:ab:47:1f:2e:
a9:ab:4c:68:be:fb:a7:f1:fc:dc:2a:e3:2c:82:a7:f5:24:6f:
8b:50:5d:5a:f3:25:6d:84:1b:3d:3c:aa:4d:8b:6c:d6:c4:85:
59:6c:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:46 2025 by rpki-client