Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier: Zhz6kALWBauUmBg58UMklZ/r5k3BXmcmBieTeDm9ruc=
Subject key identifier: 76:FF:E0:5D:A9:1C:0A:11:F1:1E:E4:FB:6F:91:62:69:16:1C:24:C7
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer: /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial: 019A7301B8875B5FF0C56A3483E34B51AE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number: 08B6
Signing time: Tue 11 Nov 2025 13:01:23 +0000
Manifest this update: Tue 11 Nov 2025 13:01:23 +0000
Manifest next update: Wed 12 Nov 2025 13:01:23 +0000
Files and hashes: 1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: arzEtcH74CYBRBmM2GAsbUAnBu0tByaAn8cxL8wNZVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b8:87:5b:5f:f0:c5:6a:34:83:e3:4b:51:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Validity
Not Before: Nov 11 13:01:23 2025 GMT
Not After : Nov 12 13:01:23 2025 GMT
Subject: CN=76ffe05da91c0a11f11ee4fb6f916269161c24c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:15:4d:a9:7c:b8:4b:ec:42:d1:8f:fa:a0:
30:20:a1:99:b0:b1:5b:5e:10:87:46:45:b2:0b:52:
d6:14:44:33:ff:cd:c2:74:51:7a:ec:e8:3b:1a:da:
d1:6b:f5:10:5c:a6:5e:25:0f:a4:89:01:18:a6:a8:
d4:80:cc:dc:33:50:cb:e0:7b:d5:61:32:d7:6e:d4:
f7:48:a7:9d:95:b8:7b:e6:31:ca:d7:28:df:6d:1f:
34:90:1f:1f:32:0a:f4:1f:34:c1:99:dc:6e:9e:5b:
38:d5:a5:e6:7f:8a:c4:05:f4:8d:50:bc:9a:72:ee:
81:c6:32:cb:cd:22:cd:19:f0:ac:82:23:81:4b:23:
d8:3d:8f:5f:40:61:fe:50:89:b8:7e:fe:bf:2f:66:
f3:1d:84:c7:11:60:b8:fe:c5:dd:cf:84:02:2a:e6:
86:22:23:90:84:5a:22:04:29:16:91:29:45:fe:4d:
6a:6e:45:59:4e:51:79:7c:b6:16:98:a4:99:aa:e7:
ff:78:68:77:a7:25:9e:4a:44:17:db:74:34:87:72:
ce:ed:ed:ca:07:de:c5:75:11:72:06:4e:11:d2:fc:
c2:02:f8:86:23:f6:de:2c:99:0d:46:15:06:eb:32:
a7:83:ba:0b:07:de:63:ad:25:5f:f9:23:96:69:00:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:E0:5D:A9:1C:0A:11:F1:1E:E4:FB:6F:91:62:69:16:1C:24:C7
X509v3 Authority Key Identifier:
keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:29:7a:61:72:2a:a9:d8:ca:f1:62:d4:69:ad:ec:ed:07:6c:
4e:2a:af:99:ea:88:5a:20:cc:af:6c:04:4d:f3:fe:66:f1:62:
01:0c:05:36:ed:15:e6:ed:64:25:a1:8f:a2:3d:d5:26:b2:79:
9a:cc:24:3a:d4:a5:87:ae:16:fd:80:6a:9a:73:09:90:73:3b:
bf:06:7b:be:6b:1c:d5:93:64:fb:0c:36:3f:f5:07:47:e4:36:
06:32:d2:52:bc:ac:d5:c3:03:57:08:2a:b6:a8:f6:97:56:53:
e4:9c:47:b2:ea:dd:90:f4:0f:1b:08:e2:eb:8d:e7:d8:10:4c:
ae:45:9d:30:fc:86:d4:48:48:b1:c0:98:36:7e:76:21:00:0c:
11:d0:87:54:a7:b2:05:12:68:f8:1d:7f:84:37:71:3b:f0:06:
89:cf:c7:89:31:cd:f5:9b:b1:e0:fc:b5:27:d8:98:6d:ef:30:
55:25:a6:0c:05:f9:03:db:cc:ab:2b:7f:e3:2b:9b:7a:e7:04:
3b:2d:48:c5:c8:4a:a2:05:4e:b3:01:81:d7:55:31:2e:4b:82:
15:39:51:61:0e:5c:90:83:14:6f:3b:3b:a9:0b:62:37:bf:5d:
7b:98:aa:cc:8c:be:80:b3:be:28:0f:d3:80:58:37:b6:cf:6e:
ad:4a:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:55 2025 by rpki-client