Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: Zc0Fs5qYOwrAqgcdSBUvzI7T8K7TrKDkCdNb5CBJqBU=
Subject key identifier: 98:AC:28:EA:C0:E8:70:B5:23:A1:73:7C:2C:99:CE:CB:3C:64:9C:BF
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 019A722631D355FBDF10A66FB4AB74CB0D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 05F2
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: sSa+PAuVOdzBw0Sw+auHkG/QEIofiwL/XmLTEp48TS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:31:d3:55:fb:df:10:a6:6f:b4:ab:74:cb:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=98ac28eac0e870b523a1737c2c99cecb3c649cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:07:a8:5a:d8:3f:aa:2e:af:a2:2a:d7:79:
e6:f4:6d:99:f4:b9:a3:b6:ec:7c:d5:ad:01:58:a4:
e7:8e:0f:64:31:12:a1:b9:59:6c:9b:7b:e5:7f:ba:
fb:22:3f:0f:01:6f:36:65:60:ce:b0:1f:a5:02:84:
59:c4:e4:f5:44:0e:bd:aa:37:9c:72:d0:a9:4f:c4:
a8:51:4a:86:36:11:32:e4:7c:52:bb:8d:57:97:28:
cb:a4:0e:1e:be:7f:95:28:74:c0:f5:3f:b6:f1:a9:
a6:2f:47:45:3b:71:bc:c3:74:93:30:7c:c3:b8:0a:
01:2a:4f:59:65:93:8c:4d:b5:7f:f3:1e:a6:1e:40:
57:ed:00:d0:63:25:c7:ef:58:28:1a:6d:e8:5d:c4:
53:be:19:98:39:ef:dc:75:82:10:58:79:9c:c7:55:
0f:bc:53:08:c5:a8:59:e1:13:e6:8d:25:22:66:de:
0f:0a:c9:30:bf:07:f8:e7:66:44:db:0a:4c:97:f9:
b3:da:dd:9f:80:ec:38:59:83:85:12:51:6f:b8:75:
e2:2f:aa:70:23:08:5f:d4:42:e8:8c:af:f7:c3:1e:
3a:6f:f9:62:83:9e:f9:45:04:21:cd:84:e7:79:b4:
d1:b8:82:8b:7c:31:6c:c2:04:6e:09:20:65:5a:e3:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:28:EA:C0:E8:70:B5:23:A1:73:7C:2C:99:CE:CB:3C:64:9C:BF
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:93:a3:83:fa:6b:05:09:fa:be:c5:77:9d:d6:59:ef:af:
84:d7:66:49:57:24:c7:e2:43:1b:ac:7c:ce:61:21:fd:16:4b:
f7:46:b7:41:17:ab:81:3f:8d:cd:cc:d5:1d:19:3c:94:ff:49:
ff:86:da:de:da:a8:40:b0:79:06:55:5a:5a:7d:7a:ea:7a:26:
48:44:50:d0:62:1b:c5:3b:2a:60:20:d6:21:eb:3a:08:d2:82:
56:e8:a2:9a:04:02:04:ed:7a:3c:b6:2b:e0:f1:3a:e9:b7:eb:
55:b6:3b:47:a7:90:7b:64:7f:f5:b1:f8:54:45:81:36:19:dd:
75:f2:13:e0:49:30:fc:89:f1:dd:ce:56:bb:58:00:cc:f6:a8:
ac:bb:ab:fb:d3:84:99:e5:20:99:b0:68:8e:37:1c:22:1a:97:
63:04:00:64:5b:86:84:a3:8b:6b:7e:89:a8:20:7c:6e:06:04:
38:5c:a1:76:14:4b:24:f5:be:7e:1e:00:f7:0c:4e:df:24:70:
89:d4:c7:fd:01:7b:09:b9:df:ad:1f:43:87:e4:4d:50:ad:bc:
39:36:7e:01:9f:c7:ac:90:0b:1a:cf:22:81:bb:9c:a9:a9:79:
59:75:39:f8:fd:4a:c1:7e:d5:c4:cd:a0:5b:38:df:31:f6:b5:
dc:28:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:45 2025 by rpki-client