Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: T7TQuZwV8BrxtRz52nIilK39eAK/E2PdYmjQ0vo890w=
Subject key identifier: D9:25:33:2C:44:48:73:E6:AF:9B:F9:FA:4C:70:F6:2B:0A:19:24:3A
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 019A73019FA7D74C0156853EAE902F97438E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 13:01:17 +0000
Manifest this update: Tue 11 Nov 2025 13:01:17 +0000
Manifest next update: Wed 12 Nov 2025 13:01:17 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: tEESb3Nz66/KlvTNfXBKyaXxeXu+/N9gFpYh9Iw865w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9f:a7:d7:4c:01:56:85:3e:ae:90:2f:97:43:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Nov 11 13:01:17 2025 GMT
Not After : Nov 12 13:01:17 2025 GMT
Subject: CN=d925332c444873e6af9bf9fa4c70f62b0a19243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:8d:1a:5c:bc:50:b5:16:07:af:63:27:52:
08:c4:3f:c2:90:e7:ed:35:81:ae:93:13:fd:36:a7:
38:b0:53:59:0d:e4:cd:e4:97:34:7a:1a:7e:be:9b:
a5:9d:3c:76:12:43:15:8a:20:17:79:82:16:29:2a:
37:ab:19:b9:e1:3b:3c:a1:eb:6e:86:ba:18:7b:42:
b6:6d:b2:e0:53:2e:71:82:f1:2a:a5:14:7f:7d:1e:
eb:5a:61:e1:c3:46:4d:f3:49:ed:25:8d:a0:1b:7e:
52:86:69:46:79:c3:b4:96:d7:d5:b1:95:6d:b3:52:
08:16:05:9f:73:40:5c:34:12:96:a0:bb:ef:26:27:
ed:60:d8:64:88:3b:18:3d:c7:02:b5:59:ad:8f:f5:
a6:ff:64:d8:c6:ef:41:cf:a0:74:43:20:63:41:bc:
ba:4a:2d:f3:8c:5d:54:44:58:ee:80:f2:cc:b4:0a:
d1:2f:88:90:b1:5b:2c:4b:d5:fe:39:fe:69:ba:02:
c7:2f:9f:d3:e2:19:d2:c0:92:a1:cb:27:f4:e1:e5:
6d:94:34:86:ba:2e:d9:d1:88:c0:4e:61:57:e3:b7:
21:79:fb:84:24:8c:ea:1a:4c:8c:8d:d6:8c:90:1a:
b0:2c:08:a4:13:c3:da:01:ca:77:bd:3c:07:b2:4b:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:33:2C:44:48:73:E6:AF:9B:F9:FA:4C:70:F6:2B:0A:19:24:3A
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:8e:e6:3c:1a:15:84:6b:36:19:fb:08:4f:ee:79:60:06:
5d:80:de:d9:de:83:41:f1:ab:9f:e4:cb:06:af:9a:17:96:da:
55:5a:2f:40:63:a0:0d:f6:0b:1c:67:6d:9e:48:56:f5:bc:0b:
e1:b9:be:0c:8c:c4:95:0c:c2:dc:6a:cc:e7:69:d0:32:73:11:
be:4e:66:91:5e:3c:66:47:38:af:5a:eb:f9:ac:4d:48:02:29:
3f:7c:75:97:a9:98:b4:bb:f2:37:c3:03:bf:4d:8a:0f:46:78:
4c:5c:57:82:6c:ae:93:c3:e6:5b:88:bb:5f:6d:2a:c7:12:46:
20:da:3c:b6:61:7d:0e:7a:a2:74:f9:60:de:28:4d:65:97:09:
77:3e:5a:28:34:2f:08:26:bb:84:b8:93:7f:98:38:21:e0:ed:
21:27:8a:83:f5:f9:a8:ed:32:fb:2e:1e:28:89:46:d0:12:77:
57:d2:79:17:a9:cf:25:bd:ad:e2:44:55:9c:b2:94:c9:50:70:
9d:1d:5b:5b:cd:51:d1:d5:70:ed:32:31:a8:30:0f:24:5b:6d:
0c:90:17:90:db:bf:36:b5:23:a8:89:15:00:cd:2a:f3:03:15:
94:15:97:bf:eb:b4:f4:3c:4a:e6:07:8d:aa:27:81:e3:b0:ae:
f4:db:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:38 2025 by rpki-client