Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: QN8E5p5gst+7ElD4jhUybryuosNANrJ/xDs+1n+ttp8=
Subject key identifier: 4F:85:8E:8E:C3:C7:32:B8:BC:BD:EC:BE:AA:02:34:7C:C8:ED:DC:2F
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 019A71B90C3A0C909F44C5597759F583855A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0D4C
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: r+R8SXQA/MDMIUXO1VM9JyUbFYYlJ9xIQ0relYLdqPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:3a:0c:90:9f:44:c5:59:77:59:f5:83:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=4f858e8ec3c732b8bcbdecbeaa02347cc8eddc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:aa:94:2c:85:4a:84:e2:36:44:06:1d:b7:
fe:e7:a2:e7:71:a2:fd:7c:d2:e4:1a:c8:72:a3:19:
ad:7f:04:38:31:28:b8:47:94:65:8a:34:b5:f5:c4:
bc:5b:fd:2f:d7:f7:72:77:e7:45:7c:92:30:f1:b5:
4d:c9:2a:71:6a:99:01:a6:a4:29:68:10:30:29:b9:
73:44:e6:55:fc:6b:35:a6:72:15:da:f2:64:2b:18:
a4:a9:e4:7e:7a:de:71:84:43:e6:af:26:a6:24:e9:
c2:d2:bc:d0:a4:73:d4:e0:ab:8d:8e:d8:a1:5c:c7:
46:49:a9:49:a3:f8:00:7f:83:8c:fc:fe:6c:7a:44:
9f:4f:57:b8:81:60:ff:89:93:4b:26:96:96:32:59:
97:54:17:aa:18:6a:8f:80:b3:6b:a1:20:21:c5:07:
eb:2f:25:95:95:33:48:b0:73:80:45:76:4e:34:d2:
b7:65:9d:b6:c1:42:6d:35:62:ef:f1:66:20:1b:2a:
29:45:b2:7b:fd:c0:44:63:30:e8:0d:38:b1:cf:0e:
e8:56:5c:aa:fc:ea:30:62:f7:d5:d1:c9:02:b3:62:
4f:4f:1c:47:8f:2a:d7:ff:b8:fb:0c:db:a5:25:dd:
65:e1:35:c8:b8:58:c7:2f:22:a8:70:6d:b7:e8:74:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:8E:8E:C3:C7:32:B8:BC:BD:EC:BE:AA:02:34:7C:C8:ED:DC:2F
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:06:0f:7d:4c:79:6a:f6:fd:23:6e:8e:d4:6a:50:78:54:
fb:36:3c:7d:05:9a:fd:8e:a5:05:a6:50:54:7f:05:0c:69:f5:
b6:1d:13:f2:ee:d6:03:2e:76:36:8b:36:3f:b2:7b:ae:7c:df:
22:17:a0:cd:1b:a6:c7:a7:7c:b0:8a:99:f6:a9:04:06:c1:3f:
d4:55:28:9a:e1:5e:e9:9a:1f:11:9c:5b:9d:36:17:22:92:bd:
47:74:6e:b8:c3:a0:a2:6a:56:b9:46:2c:95:ab:18:6f:de:10:
1e:56:d7:e6:ec:4b:2f:79:ac:88:5e:10:5a:87:88:40:5f:65:
2f:0b:96:23:13:ce:c1:10:d3:5a:3b:6b:c7:39:6d:6b:e7:34:
fb:57:ea:e1:92:9c:95:a7:d1:5e:8c:fa:ba:f8:cc:88:72:6c:
91:37:9f:b9:18:7d:76:07:97:8a:61:25:c4:20:50:71:5e:52:
9e:2a:88:83:dc:8d:14:3f:8d:36:13:b6:7f:07:07:6f:da:9a:
ca:d8:98:a0:fb:6a:d9:14:83:84:6f:22:3a:f6:56:9a:36:83:
55:ce:45:bf:da:13:1c:47:3e:07:0f:f6:89:15:f7:d0:2d:f8:
17:2e:9d:74:20:6f:d4:08:ff:79:61:8b:d5:ad:84:57:bb:85:
0b:ad:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:34 2025 by rpki-client