Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: QNDqJItfoy/4/1lIOseOf3ytTszwA6CsxINJUqV98YA=
Subject key identifier: 78:FC:BC:C2:3D:E1:4C:0E:8A:A3:F2:B3:A8:B4:D7:2E:9E:D3:94:62
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 019A71B8848BE615A5687ABABE71F2F43C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 05E0
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: jPXOdvQU11wWiGcmw52XeiAYFw5S19UssLmNvApR1Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:8b:e6:15:a5:68:7a:ba:be:71:f2:f4:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=78fcbcc23de14c0e8aa3f2b3a8b4d72e9ed39462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:37:de:46:ad:d6:0a:9d:39:d7:fb:0d:7f:
1b:d9:9e:f6:fa:31:d1:26:87:71:e4:b7:54:3d:54:
53:ee:d4:81:9a:05:33:91:6a:ea:d6:47:d3:13:22:
b3:f3:e1:12:9f:95:1e:ab:cd:62:43:73:67:c8:99:
f5:7d:90:72:ad:46:be:49:6b:09:b9:dd:bb:21:d2:
b0:e9:b5:c7:a0:44:1f:2d:32:6c:4f:61:c8:a0:4c:
cd:06:bf:60:52:e1:9b:c5:4a:0a:8e:e1:dc:3f:48:
d3:5f:99:be:4b:c9:d8:69:1e:70:de:18:90:78:63:
c5:41:83:51:6b:c6:53:7e:4f:92:ef:2e:3a:d7:ef:
ad:ff:fd:ed:0f:be:61:f4:8c:60:78:98:aa:ca:29:
ed:3d:e2:ae:ba:3c:4e:da:c3:e8:66:01:d7:6f:14:
29:5b:27:be:f6:84:1a:39:e0:b9:ac:00:a3:98:51:
f5:52:97:37:f7:3e:c9:07:43:14:ce:93:bd:54:24:
0e:9b:89:08:57:b8:1d:5c:c4:b3:6e:d5:46:5a:38:
61:b6:0f:82:29:45:33:d4:9c:2d:ab:de:72:f9:89:
4e:f6:06:42:63:91:1d:12:48:4b:00:f0:65:a9:e6:
af:40:8b:27:b1:30:39:63:50:cb:8d:75:bd:49:d1:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:BC:C2:3D:E1:4C:0E:8A:A3:F2:B3:A8:B4:D7:2E:9E:D3:94:62
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2e:d1:02:58:a5:95:e7:07:7e:9e:c3:77:f5:a8:13:33:8e:
6e:5c:dd:aa:1f:a8:fa:d7:6b:b1:eb:70:77:84:9d:1e:c9:fe:
3d:76:00:37:39:aa:27:35:76:8e:bd:92:51:a0:d4:fd:14:d5:
e1:47:2a:3c:3c:82:9e:b8:85:26:69:bb:c9:1f:ce:85:bd:63:
62:fa:68:57:a7:36:9b:49:f8:e6:27:12:9a:c7:88:2a:f2:78:
42:92:ca:c7:b4:cb:dc:b6:7d:8f:20:1e:b8:3f:69:7f:71:44:
d7:35:06:0a:b9:b7:63:13:08:92:c4:bd:09:f2:13:e2:65:c2:
db:3f:ce:4d:24:9c:d1:1a:74:96:43:44:3f:77:db:00:c6:f1:
55:df:59:1d:24:a1:27:5c:a6:d1:f9:d4:3d:37:ac:df:53:08:
cf:14:52:38:83:09:6e:6a:f0:3f:5e:1c:94:48:bb:5c:4d:15:
24:bf:eb:1f:35:f3:8c:e2:ea:3d:a7:f3:1c:09:48:1b:b3:70:
b9:26:2d:c4:51:2d:6d:28:91:a1:1e:4f:4b:4a:2e:69:86:8c:
aa:9a:6b:36:57:75:be:12:b5:08:30:97:5c:77:fc:c3:d0:7b:
1b:28:f6:fb:f4:6b:f2:35:7e:a7:89:99:e3:3f:38:03:39:db:
e2:38:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client