Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: M+tYC2rOblxUGAPccc6jQFfdKLiyLS1XBIkki6gHQKU=
Subject key identifier: AC:E9:A9:FD:FC:CD:2D:27:2E:85:74:C1:60:E2:AD:2E:DB:2E:11:2B
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 019A7112DCA1E998E4050A89238DDE8ACC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 0815
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: bOjolxq1q+ttge3orv4qGopNmYSuNuNL7JdZmIZskGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dc:a1:e9:98:e4:05:0a:89:23:8d:de:8a:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=ace9a9fdfccd2d272e8574c160e2ad2edb2e112b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:de:69:7d:9d:85:0f:ca:ab:d4:8f:67:4d:
41:42:ab:92:56:57:dd:d6:fc:4a:94:1c:94:39:cb:
e3:f1:30:6a:cd:99:a7:23:2a:ac:9b:c1:ba:b5:f9:
e6:bc:a9:c8:57:61:29:c7:ed:fe:5e:f5:44:b1:69:
3d:8f:55:36:b0:4a:3c:78:f1:d3:22:38:36:64:f2:
4c:75:eb:f8:c2:6e:9b:1d:87:68:31:ec:95:53:ab:
8d:d5:82:51:89:ee:9c:89:15:c0:c4:eb:de:24:60:
0f:3a:85:44:04:dc:a8:8e:e6:4f:50:f7:a1:ee:62:
85:6d:d8:02:e6:1b:a9:73:4b:5b:93:df:de:5b:bb:
b7:0b:06:27:f0:1d:bf:0e:ab:49:28:df:20:6e:5c:
bd:e1:97:01:54:2b:15:e1:a6:1c:33:0b:5f:d3:5d:
26:b2:d0:97:97:f9:ac:91:b0:b3:d5:1f:1b:d1:b6:
9a:ca:f8:9d:d3:c4:c4:fd:07:f5:67:7f:a7:e9:0f:
9e:f9:51:70:b9:3d:ee:ec:00:d5:a9:17:70:ac:34:
db:7f:0b:00:0e:28:2c:40:15:e1:f8:b8:3a:1f:fb:
be:5d:b2:61:12:2b:13:c0:0d:2e:14:9f:fd:5e:ba:
c2:36:d5:98:b0:6f:03:87:4b:b5:34:d1:ea:52:bf:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:A9:FD:FC:CD:2D:27:2E:85:74:C1:60:E2:AD:2E:DB:2E:11:2B
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3a:af:66:a5:e5:84:3e:eb:98:f1:df:45:01:d9:5c:5b:15:
94:e7:55:61:66:4f:8d:40:c6:98:69:6d:20:1f:55:5c:50:16:
b4:92:32:90:ac:2d:5f:1b:70:82:1c:9c:64:59:bf:c0:73:1d:
73:0a:a4:df:b5:1e:9e:23:d4:5e:38:13:69:28:2a:57:18:1b:
0c:eb:c1:a0:2b:2e:73:90:75:50:da:45:b9:69:e9:b8:c1:51:
f8:83:f2:41:f3:09:e0:27:fb:2b:3e:db:89:0a:03:a5:85:1d:
0f:54:e3:2c:2f:8e:53:99:ad:c1:94:7a:de:91:a7:c3:c2:40:
d9:b7:c3:fa:92:3f:c3:e5:02:10:27:73:82:41:fd:21:e9:27:
c7:99:6d:c9:61:62:f5:95:61:0b:28:44:c9:63:c7:13:64:48:
4b:b7:b2:1a:07:a2:67:85:1e:c1:c5:fb:80:99:c0:d4:a4:2c:
70:5a:d2:de:fc:50:fb:b6:29:d0:e9:c2:e5:04:d5:a6:83:28:
a9:44:52:d8:05:e7:6c:ba:c7:c7:ac:c6:fc:f0:85:81:43:95:
53:89:c2:85:46:b4:10:8c:94:09:9a:ba:11:75:8b:8c:99:06:
8c:02:80:60:7d:09:6f:be:d0:1f:5e:96:0b:2e:92:6d:35:b3:
f9:d7:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client