Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: b1X37GI/N4maY4YDzN6ZbwFoWEbbUreEqkvcpkp2aYU=
Subject key identifier: 8C:BF:83:FF:0C:67:EF:71:64:63:06:9C:22:A0:10:91:D0:6F:F8:FC
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 019A71B86E34EB38CB2ACE4793E9E396E478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 1589
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: 3RFDblnFRMEt4BFfExwwb+83UpqW/Vv+slJjGlVSHQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6e:34:eb:38:cb:2a:ce:47:93:e9:e3:96:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=8cbf83ff0c67ef716463069c22a01091d06ff8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:1c:86:3f:72:5d:b1:66:59:e2:29:33:f7:
49:f9:61:2e:d3:c6:4d:97:9f:27:fb:90:02:8f:98:
be:a0:0a:50:dd:9f:dd:9d:1c:b8:86:cf:ad:42:cc:
dc:c7:0c:7e:92:2b:6a:6e:be:06:d8:0a:24:c2:09:
89:9c:a9:8b:62:d0:52:19:41:51:76:d5:04:06:7d:
3b:73:33:a5:95:09:34:7f:50:c7:a7:db:89:34:5e:
9e:dc:21:be:24:e1:8a:b2:5b:24:10:c5:3f:8d:4b:
04:10:30:05:21:fc:88:1a:b7:ac:52:2d:04:4e:64:
db:7b:0f:8d:7f:80:26:e6:f9:67:82:88:61:11:31:
e1:5e:22:ee:64:4c:2b:63:1e:a6:52:0b:2b:76:46:
8e:a6:69:a1:ed:4a:de:73:bf:9f:00:5c:42:d0:b9:
64:1a:ac:44:a6:bf:fd:8b:e3:2c:ad:f2:8f:47:82:
d5:86:45:ab:50:e2:4d:b8:aa:0b:d2:7f:6b:03:62:
ce:12:ff:69:a8:10:3e:58:ea:3e:ba:2c:b4:c3:bf:
b6:e2:8d:c7:a3:8f:82:8e:54:f5:10:2d:7d:0b:21:
a0:6b:30:0c:33:b2:18:ab:74:be:22:e6:c8:88:e6:
0e:dc:c2:70:47:01:f5:d0:9d:68:4b:ad:cb:5f:ed:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:83:FF:0C:67:EF:71:64:63:06:9C:22:A0:10:91:D0:6F:F8:FC
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:ef:c2:27:6d:d9:f2:0e:a5:67:1b:65:0d:f0:db:fe:7b:
a1:34:0d:fd:a0:cf:e4:9b:cd:6c:03:3d:d1:be:8f:03:ea:29:
c5:a6:b9:4b:6a:48:fc:8d:0a:13:6e:a9:33:6f:ea:35:f5:4a:
5f:98:9f:10:b1:94:6d:30:46:19:7d:75:ae:ba:ae:90:c3:34:
88:df:a5:bd:2d:d4:bf:60:50:42:4d:c9:8c:88:db:fe:e7:86:
1a:d3:96:76:7b:8e:1e:f5:88:ff:f8:05:a7:af:b4:a0:d2:57:
bd:76:dc:81:7b:d5:e0:d0:5a:7e:6f:a5:6b:8b:a0:bb:95:63:
03:4b:1f:b6:2f:83:59:72:49:d0:6e:35:a7:6f:f8:f1:27:99:
71:1d:16:a8:47:73:04:d4:87:8d:e7:8c:57:99:ea:9b:a3:4a:
94:69:6d:60:18:e0:ef:ea:8a:5f:cf:7b:16:ef:13:89:0d:0e:
03:da:01:7e:74:fb:bf:fa:58:93:20:7d:5e:dd:6e:d3:6a:d9:
c7:ef:d0:02:1a:bd:f0:06:af:9c:11:1e:74:bc:36:70:2c:06:
c1:3e:7d:e8:13:9e:34:cc:f9:c0:de:f3:de:3f:28:18:4d:7d:
b5:44:0f:f5:a2:df:58:6e:67:93:f7:0c:0a:2f:72:b6:55:ca:
82:c0:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:42 2025 by rpki-client