Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
File: jDJOtM17M3hJro0yb8iZAvUDpMY.mft (raw, json)
Hash identifier: CbK+4s3DYKitV8n9U7CjqPTntq7j0NgwNGWmcWrIxUQ=
Subject key identifier: 1E:6C:11:DA:96:13:A0:6C:1B:37:A9:0A:C4:F7:7D:B6:2B:0B:1A:E9
Authority key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
Certificate issuer: /CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Certificate serial: 019A7149A5BA56BA8C938E5A6F2C92FA12CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: jDJOtM17M3hJro0yb8iZAvUDpMY.crl (hash: IPvrM3nh0dUBCIPHoqpo0ZOUCmQRPsGRlRJoDPuBdKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a5:ba:56:ba:8c:93:8e:5a:6f:2c:92:fa:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=1e6c11da9613a06c1b37a90ac4f77db62b0b1ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:de:dd:49:77:47:ee:0e:6d:6d:1e:80:01:
f5:8a:ab:11:10:43:e6:b7:d8:3c:c8:f3:8b:8e:0d:
8c:11:e5:ab:5a:f0:32:36:14:67:48:b8:e8:3b:8a:
a9:2d:03:b6:e0:c7:66:24:20:16:2a:16:89:93:34:
12:b7:71:e4:11:42:a7:cf:50:ba:cc:8e:f7:27:d8:
15:16:05:3b:f1:4e:0e:cc:37:f9:55:21:bc:30:c5:
3d:50:7d:e0:f6:f3:d6:ee:40:74:1b:e3:28:e7:26:
00:d0:a3:80:7e:e6:cd:57:10:86:fe:8c:ed:98:46:
fd:6c:38:0a:89:84:05:a4:ae:ce:1e:e6:69:3e:42:
f1:4e:fb:cf:00:ff:a2:ba:49:43:b8:d7:36:47:2a:
c4:c2:18:de:5f:c1:32:71:b7:3d:3c:37:58:c4:33:
5d:a9:d6:45:af:db:9a:82:df:1a:2e:b7:76:53:7a:
3b:5e:a0:e2:ab:0f:ed:dd:64:47:1e:ec:4d:f6:71:
9b:09:f3:ed:b6:b4:3f:1e:fd:b8:7f:85:8f:da:3f:
21:3a:0c:ff:30:d2:39:30:88:31:81:9f:f6:77:22:
67:56:5b:62:cd:56:cd:fd:42:27:4e:fc:3b:b4:44:
0a:ac:41:7f:e6:b8:ce:78:65:6d:9d:13:30:5d:25:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6C:11:DA:96:13:A0:6C:1B:37:A9:0A:C4:F7:7D:B6:2B:0B:1A:E9
X509v3 Authority Key Identifier:
keyid:8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:b0:86:9d:a8:cd:0a:ab:f5:9f:ea:ef:da:2f:01:45:e8:
b1:30:2d:05:51:fb:56:f1:67:20:82:82:f1:ae:52:64:8d:cd:
c3:bf:5d:e7:89:88:bc:51:c5:ee:01:04:45:06:eb:b4:f9:25:
f7:4b:92:d7:17:98:4a:27:fe:be:ae:7b:ac:d6:4b:ec:c9:d3:
51:ec:d4:aa:4f:41:21:56:da:0f:cc:2f:8a:42:58:2b:48:75:
e1:89:ed:71:a2:ed:36:5b:b7:87:20:00:f9:f0:ac:80:f5:7c:
73:da:99:4c:8a:cf:90:a9:a6:28:45:1b:45:e8:97:3c:e5:6e:
7e:24:91:02:4d:0f:a7:c6:cc:2d:34:be:f3:1f:8b:69:07:3e:
ff:2f:98:2b:8c:7c:42:f7:5d:61:03:73:0b:52:b9:d8:35:e1:
dd:b7:a3:15:a7:77:54:e4:57:1a:f1:08:14:d3:e8:6d:c2:c5:
81:de:dd:71:ce:60:ab:a7:8b:7b:bb:0a:55:30:f2:74:f9:c8:
68:f3:aa:3e:29:62:d7:4d:f6:9a:99:5f:0e:5f:3c:1c:c7:28:
ce:03:80:c6:7b:aa:98:fa:a2:3f:4e:b7:a5:e6:de:3a:13:50:
26:72:76:01:a9:6d:5c:67:17:90:9b:d7:12:6e:7e:02:7d:5c:
84:0e:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:59 2025 by rpki-client