Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: qQxyMix0JzK1vCLNRKFtU3xnWiLqfB5GM1OldwW2dY4=
Subject key identifier: 00:CE:40:5E:48:00:78:7F:B0:DB:4E:45:78:39:29:C9:47:DE:DF:DC
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019A722599FF843CC1B22DF9427B2CF145E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: tDSEL41dXh03ZFi+XI/2rWSDPR9Xi4daFDl77irfexU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:99:ff:84:3c:c1:b2:2d:f9:42:7b:2c:f1:45:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=00ce405e4800787fb0db4e45783929c947dedfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:cf:c9:55:16:c0:a3:62:b0:55:fd:a7:31:
97:2c:39:6b:42:f0:40:6e:6a:e8:c4:41:be:66:68:
f3:ea:7a:3f:9d:21:f7:b3:08:a5:0b:d5:be:9b:1b:
c6:13:77:50:00:5c:67:8a:b3:ff:88:05:cc:48:b6:
e6:a0:1e:86:d0:b1:d7:66:1b:2f:93:53:3f:9f:1e:
38:59:71:51:3e:2a:6b:df:bc:b1:9c:43:e6:47:e8:
dd:3d:a6:7a:f2:2b:e8:7f:91:20:a9:03:b5:e4:f9:
93:4f:16:02:27:9c:a7:c5:7d:99:3d:b1:e4:d7:d5:
70:2e:49:07:02:fe:6c:13:a2:ae:29:5f:5c:c2:5d:
88:be:83:67:14:83:2f:8c:94:e0:31:54:3c:c2:9f:
fe:af:1f:75:08:c2:9b:83:a1:fd:2f:a4:a0:66:ba:
06:97:d8:9c:a6:aa:8b:58:f6:a3:79:81:cb:19:b3:
e5:5a:ae:41:f8:31:5d:f8:da:d1:3c:10:97:c5:5a:
c6:4d:be:da:02:5c:41:e8:8e:64:44:69:bf:de:6a:
fc:f3:99:b6:88:99:46:6d:dd:9e:19:93:b5:1a:49:
0e:a5:06:47:49:5c:fe:5d:a5:57:65:0f:4c:2d:da:
16:96:35:41:f4:38:ed:37:b0:84:f2:a2:08:50:f1:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:40:5E:48:00:78:7F:B0:DB:4E:45:78:39:29:C9:47:DE:DF:DC
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:92:40:fc:30:48:c8:0f:86:85:d1:10:08:ce:7f:52:87:
c3:ad:78:0a:53:0e:4f:66:88:cd:d0:d3:a7:b1:e6:de:ed:01:
94:1f:3f:d1:b9:82:d3:cb:78:4c:30:72:c6:3e:c0:b7:43:9e:
a9:1a:02:21:65:96:ba:29:31:6e:4e:f7:af:c6:7a:57:2b:2e:
45:b0:b8:1a:09:f8:a3:48:56:77:2e:99:1c:b0:a8:c3:39:b0:
7f:c5:26:3b:00:05:b9:49:43:2a:98:98:8a:36:dc:87:f6:8f:
9d:68:01:c8:91:7c:4d:69:87:cb:e7:76:15:40:04:fd:50:91:
23:45:66:1c:e5:a5:bc:91:5a:3e:9f:e2:06:e3:2d:a7:eb:10:
54:8f:ca:cd:66:c9:4e:a5:e0:21:ab:9a:58:d5:17:66:4c:90:
35:20:3f:70:28:b4:cf:b4:db:52:3c:e2:b7:0b:80:6c:da:8b:
26:d6:aa:bb:04:a3:15:0c:77:7c:03:9a:b1:0a:2a:ed:09:44:
b9:75:a2:f5:a1:14:7e:bf:84:86:e5:2b:bc:a5:c5:19:5b:e8:
a1:34:00:c7:93:ab:f6:fb:ed:0b:73:a8:92:9a:39:ce:f2:1b:
c3:aa:dd:40:87:4e:c1:42:3f:6e:07:30:91:a6:e0:02:10:36:
0c:3e:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client