Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: B/49DeMcNObjen9k87TedswfCemKSMQQJQnGA4u8tc0=
Subject key identifier: 86:66:25:2F:EC:67:91:66:18:4F:39:EF:2E:25:C4:F6:6A:96:88:3E
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019A725CD87EFDBEC3D389211068F3C76CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 092F
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: DKtzrBJN8yFOnib9FfIB6J/KTZL9IKTgSEi1urGIjDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d8:7e:fd:be:c3:d3:89:21:10:68:f3:c7:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=8666252fec679166184f39ef2e25c4f66a96883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:51:cc:f9:6d:b2:f3:40:4f:00:09:fc:9c:
4a:b0:7f:40:48:30:34:13:01:09:0a:c1:ca:c6:67:
f4:18:f2:a6:78:88:fb:66:a8:36:dd:d4:85:ae:86:
94:a2:41:da:0d:23:8b:a9:11:51:60:50:00:5b:08:
32:35:ef:d5:3b:f3:46:27:79:0b:91:9a:88:14:83:
c6:96:38:a9:f8:20:8f:fb:65:20:e3:b6:06:15:02:
ac:bb:83:d3:6a:14:22:e4:2b:c9:16:df:39:64:25:
92:1e:cf:8c:eb:bd:6a:d0:28:de:e3:6d:03:77:06:
7b:00:1b:ef:98:ca:bb:26:55:52:44:27:3c:68:3e:
55:ac:13:77:d0:c1:18:2a:13:9f:bd:11:db:45:4e:
38:11:57:a4:58:12:31:13:ca:ab:f7:1d:25:c6:d7:
a6:66:de:b0:7a:5a:0c:eb:a6:44:43:b7:6d:ca:95:
e4:21:ad:ab:ef:90:41:ba:22:25:6d:6d:33:c2:71:
57:23:f6:8f:07:34:53:b3:24:52:c8:05:76:84:25:
a3:e0:f0:0c:9f:a5:2c:d2:db:f5:0b:b0:11:b9:06:
a1:cb:3a:53:6c:bf:d2:7a:98:97:3e:14:d5:b5:cd:
cd:f7:c5:0f:84:02:6b:0e:14:f7:ad:cd:7f:9f:60:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:25:2F:EC:67:91:66:18:4F:39:EF:2E:25:C4:F6:6A:96:88:3E
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:c3:c7:cf:c9:f2:9f:4b:12:08:8e:58:57:6e:e6:bf:7a:
15:a1:a6:6b:a6:0c:3f:a8:e8:2a:85:0c:5a:33:e2:27:52:73:
d8:81:0e:e2:1e:93:60:57:a5:99:32:72:1c:24:0e:46:4a:82:
95:04:a6:a2:4e:1f:7a:72:b6:1f:e5:af:02:c6:45:9d:66:6e:
9a:c4:c7:f7:ee:9f:6f:63:46:31:e5:69:76:e3:24:b9:34:eb:
5b:43:56:39:2c:1b:b0:e8:e6:c0:5c:a3:f4:96:3d:ca:15:af:
d3:31:19:87:63:06:e6:81:71:41:43:12:d1:12:1e:66:3a:4b:
97:b1:52:bc:79:9d:91:ca:72:89:d4:f6:94:88:b8:d2:9f:67:
f1:a5:1e:96:6e:1f:b5:f7:35:91:64:06:3f:11:6a:0d:4d:33:
1c:fa:f4:e2:28:e1:a6:f8:ec:1a:96:00:33:e2:1f:51:ae:22:
99:ae:05:8d:3b:b7:09:5a:d4:0d:50:61:62:16:9d:41:b8:70:
54:53:d1:1b:db:f7:09:8f:d7:19:37:94:84:2b:e7:4f:5c:c9:
6d:24:28:d2:87:05:7b:8a:ff:60:9c:b8:8f:bb:a0:2f:60:1d:
b3:12:95:0d:b6:92:89:f1:7f:30:ac:55:f8:9a:2f:ae:1b:f2:
2c:49:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:29 2025 by rpki-client