Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: EsQ2FcYXNukVpHSN9HwqroqkBw8yqDm9Q1KgAgbIwg4=
Subject key identifier: 4B:48:63:6B:E2:EB:56:87:68:47:DF:88:92:E7:96:68:11:E7:95:17
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 019A71EE6DA1BC3A281C2219374331E0365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0FC0
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: GSPoMS7XBkF4z8BdolejaSrzkwpOa/EGcYuyklsSrlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6d:a1:bc:3a:28:1c:22:19:37:43:31:e0:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=4b48636be2eb56876847df8892e7966811e79517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:8f:68:34:74:46:a1:b7:09:65:4e:94:31:
c9:88:b1:7c:e1:1f:20:97:2b:da:a9:79:dd:74:6d:
98:9a:4c:8a:33:84:5f:34:92:1f:38:83:e7:79:45:
67:e7:2a:af:9f:08:c2:f3:a8:03:9e:ad:30:e2:f2:
af:cf:01:c1:50:80:ea:67:e3:ce:ce:82:2e:4b:39:
b7:b0:a0:03:09:34:f7:ba:a5:40:62:6a:8d:ec:d5:
3e:15:61:77:ae:70:f1:a7:4a:e9:26:2c:21:24:d2:
04:5b:eb:51:00:4e:df:6c:72:9a:fd:8a:2d:68:53:
43:62:8d:a6:0f:e0:7d:90:af:6f:37:72:d4:1c:0a:
cd:cb:1f:3d:04:ba:98:49:f1:e8:3c:bb:51:6d:da:
b2:e7:0f:b2:c8:79:45:6b:bb:8e:96:11:07:7b:2c:
36:47:03:09:cb:54:f0:e8:63:ac:62:bc:ce:ff:ae:
8b:21:d2:7a:d7:ca:3f:37:cb:da:f8:33:b2:fa:c8:
88:fc:30:21:d2:1a:0a:e0:28:30:69:36:5d:b0:8b:
d1:d3:bb:b2:53:17:be:dc:b8:18:4d:4d:71:20:94:
71:09:ad:1d:1b:1f:2b:db:cd:8c:d9:be:9d:32:30:
9d:28:30:0c:a4:51:bf:92:c5:da:44:85:91:15:25:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:63:6B:E2:EB:56:87:68:47:DF:88:92:E7:96:68:11:E7:95:17
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c3:6e:13:07:84:69:c9:2d:1b:59:d8:97:48:98:9b:de:1e:
bc:63:b8:2f:df:67:ff:74:a7:bc:b7:1d:27:59:c8:ea:d1:4c:
89:89:2e:d5:ea:aa:f3:05:16:8d:ce:ca:81:ad:28:ce:47:18:
37:a9:1a:18:d8:01:c5:0a:36:59:1e:de:31:ac:48:d8:a5:f9:
5e:e2:55:3c:2d:5d:c8:99:41:1c:04:0a:54:b2:73:f6:80:a6:
db:2b:60:23:e2:4b:06:36:c3:a8:dd:06:f8:5c:79:0c:88:63:
54:21:70:a8:0d:48:8a:04:60:56:2e:c2:81:76:a6:e4:27:14:
26:8a:f8:73:82:6a:5d:3b:cd:54:da:3d:8e:1b:15:d4:33:7b:
39:c0:02:13:47:1f:ba:92:4c:b2:85:1f:f7:81:45:61:20:60:
6c:2d:df:a8:a2:cb:bd:1c:df:97:7a:51:dd:30:3d:b0:97:55:
10:e6:18:6c:14:af:17:0a:60:07:46:5e:7e:90:9f:24:05:2d:
21:2d:af:f9:15:17:6e:08:c1:0f:80:e5:6e:6f:73:a1:26:12:
9b:88:8f:74:f2:6d:37:d3:dc:81:0d:b9:ea:78:64:ad:5a:e3:
5d:3d:f8:b5:91:02:fc:65:0b:f0:21:e8:0f:b9:62:02:f7:51:
c6:54:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:12 2025 by rpki-client