Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier: JUuVHht68JTcBK0GJpZIlDuFTWMAqp78T94hbJg65dc=
Subject key identifier: D9:18:E3:53:AF:79:68:BA:BB:54:74:D7:6A:26:F0:35:9B:31:16:60
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial: 019A71EE812922F14D333B3BA1F58B6ED3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number: 046F
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: +btVtU9s5WBuvR3BuPrzHhoDcDGXw3nfb+qR+LSCiuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:81:29:22:f1:4d:33:3b:3b:a1:f5:8b:6e:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=d918e353af7968babb5474d76a26f0359b311660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:63:27:02:54:7b:21:eb:9d:7c:c5:9e:6a:
d5:f5:a9:e5:43:ff:ef:10:db:51:00:7e:de:4d:b3:
69:15:c3:af:b9:ab:9f:75:56:14:fa:97:84:29:7d:
37:3f:ff:f8:f3:3f:21:ac:4c:2e:a3:56:2b:5b:ae:
1d:4b:4b:8c:da:bc:9d:21:30:94:76:eb:97:37:fc:
95:38:d5:99:be:30:8e:bd:13:5e:05:b8:b3:81:f3:
8e:da:9c:06:b3:77:66:7a:60:55:6a:8b:ec:36:54:
f6:c6:cd:20:71:a2:16:a8:ae:ec:4d:a6:8c:df:21:
de:93:b7:0b:60:fe:00:cb:47:b3:50:b3:5c:ae:79:
2d:4f:4c:30:f3:ad:e7:ef:f9:d5:c6:2d:a1:33:09:
4d:b2:53:43:7e:df:c2:af:48:2a:b9:1c:98:8d:ec:
dd:42:76:03:ce:f8:55:d3:5b:ce:fd:be:f9:85:25:
83:72:2a:8e:14:da:5a:6b:0c:1c:c2:b4:c8:3d:c8:
0d:35:bd:d6:a3:47:98:12:71:3f:7f:b9:88:c3:ba:
60:25:53:73:7d:10:d7:31:ab:c7:d1:6c:df:e0:a2:
31:25:49:69:e6:4d:e3:ac:38:8f:e4:0f:89:21:ce:
86:ee:fe:f4:53:d9:f2:d1:71:16:9a:92:78:7a:bc:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:E3:53:AF:79:68:BA:BB:54:74:D7:6A:26:F0:35:9B:31:16:60
X509v3 Authority Key Identifier:
keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:5e:c2:4b:44:41:b9:80:a0:ec:df:9a:64:53:f7:65:a6:
9f:50:7d:77:50:4b:ae:99:f6:7e:9b:19:75:9f:5e:e7:f9:65:
da:8c:c3:8f:22:74:1b:57:51:fa:c3:1f:86:c7:aa:b9:1d:a7:
ff:ac:69:b0:eb:b2:27:f2:db:f3:87:a4:39:6c:4c:fa:a2:4a:
d7:65:fa:33:f4:aa:6a:74:25:f3:04:0b:fa:1b:d8:e6:a7:cd:
6f:e1:a1:e2:49:cd:70:8b:04:16:4b:82:ba:37:41:de:41:7e:
b5:5c:08:d4:02:47:2f:d3:eb:b7:e1:44:4a:0c:09:8f:3f:64:
8e:dd:a0:df:71:17:72:77:08:1d:49:5f:55:e9:b8:57:17:ad:
33:b0:21:64:04:84:0a:fb:97:cf:3d:f5:ef:0f:c6:71:4b:ef:
8a:0b:bd:e6:56:88:0e:a1:1f:0a:ef:62:ab:51:3c:20:a7:0d:
5c:95:8c:cc:fd:69:77:a8:4d:9d:b5:3f:d2:89:1f:9c:d3:f2:
5e:35:5f:81:77:c4:3f:4f:c0:92:8c:d5:94:0f:aa:af:0c:45:
4d:1f:af:2b:86:77:33:e3:66:d2:f3:32:dd:1b:9f:4d:4b:c6:
d2:5f:53:89:78:5e:ed:2b:d8:51:e0:fa:2b:74:60:80:6b:eb:
4b:57:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:15 2025 by rpki-client