Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier: ubRRurOXGgD3dquqLhTyHAsR/VDtVet57LMmE+zuq6Y=
Subject key identifier: 79:36:94:04:74:35:A8:EF:7D:15:CD:CF:68:19:EF:0D:AD:13:31:14
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial: 019A71EEC36C36E3149D21FA8C5C835948DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number: 0657
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: pLIlKV6MYz0Gau0mbqAwEQpUlOFouia8wU/VlXTtZ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:6c:36:e3:14:9d:21:fa:8c:5c:83:59:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=793694047435a8ef7d15cdcf6819ef0dad133114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:74:bd:d1:18:e0:3e:0a:b5:98:ab:5e:25:
c5:a5:53:f1:2f:66:25:b1:21:e9:1b:cd:87:88:c3:
be:ec:5f:32:7c:6e:49:af:7d:b6:2e:3c:7c:25:89:
8e:98:2a:14:78:8b:cb:f3:c4:19:20:7c:aa:2f:c0:
3f:b8:e1:ed:b3:42:51:01:21:71:2f:29:3d:f8:64:
6e:15:ab:28:65:be:92:49:ed:ec:48:b6:79:e9:54:
66:37:e8:68:f7:7d:46:ea:b8:c7:f0:03:fe:32:bc:
95:5b:0a:9c:7a:50:55:ae:05:e2:df:e1:95:35:53:
03:bc:60:a0:17:71:ab:40:f0:ff:89:27:dd:4c:3e:
c4:cc:1b:14:4b:66:e2:44:95:d7:e3:1c:e3:31:6b:
6b:ef:4c:5a:7f:4b:46:05:13:88:ab:32:13:52:44:
b7:b1:89:96:ee:d8:b5:84:5a:88:09:6d:3a:0d:f9:
6b:80:f3:33:5c:b9:65:43:d5:ff:a4:19:17:63:ff:
8a:99:66:ad:7c:69:7e:e5:13:af:10:1c:09:6a:99:
91:29:4a:97:f6:fb:1b:a5:2f:94:f3:35:5d:68:0d:
db:4c:c0:e2:48:55:cd:f1:96:0b:87:03:00:60:0e:
25:e8:0b:87:85:3e:60:12:85:95:04:fa:df:4c:c7:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:94:04:74:35:A8:EF:7D:15:CD:CF:68:19:EF:0D:AD:13:31:14
X509v3 Authority Key Identifier:
keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:78:9b:92:c2:15:f7:05:9e:bb:c2:bb:80:4b:68:a4:f1:
ed:c0:8a:15:30:20:6b:ab:36:0e:64:68:c4:17:75:a0:fe:9e:
5e:4b:47:17:16:53:fe:e1:eb:50:1a:d8:86:83:31:a3:0b:05:
09:d1:73:59:b8:e8:f5:aa:82:5e:7f:d9:db:da:08:b2:5e:44:
bd:c7:bd:e0:f2:c5:a5:55:b5:d1:9b:12:08:09:39:c6:22:5c:
16:56:9e:54:1d:18:61:4b:f2:32:43:55:2e:03:ad:f1:1a:d8:
8c:86:76:f4:25:94:32:71:fc:a4:af:02:14:0f:96:d1:bd:23:
62:7e:79:0e:46:89:bf:4f:04:fb:02:cc:95:75:79:17:fe:db:
8d:9d:94:5b:64:36:bf:24:4d:64:30:9e:03:c0:3b:ee:ca:b9:
e0:ca:89:5e:64:c0:92:9d:d6:22:2f:f9:bc:c8:3c:ac:8d:65:
94:9d:e9:cb:2c:ca:39:0e:8f:46:79:37:fb:cd:69:7d:21:7b:
8f:da:13:26:6a:a6:b0:ce:e6:41:3f:e1:47:d7:87:1b:5e:2f:
a2:13:9f:c5:0e:e2:65:97:32:89:82:95:b2:3e:a0:10:3b:1d:
6a:f7:51:64:71:6c:ef:27:3b:ea:73:91:e7:f6:1b:d3:53:84:
75:d8:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client