Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: W2Md7a3xGUqeuUl1mxBiCn3ZWR7Ziu9OwnYWk+S9gSs=
Subject key identifier: 8D:B5:F0:8A:3E:83:98:02:BC:21:2B:E0:D4:BC:CC:F3:B5:01:BF:F4
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 019A71B7917ACE690E1F025B97E7FF9352CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 149D
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: QIFdmJ8f5TYsKDTLCO2Zios5y/Uxprx+LVXoOBPjmrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:91:7a:ce:69:0e:1f:02:5b:97:e7:ff:93:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=8db5f08a3e839802bc212be0d4bcccf3b501bff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:25:9e:78:ca:89:22:1f:7b:8e:67:39:e1:
5c:dc:8f:7e:67:67:22:21:1d:ad:4f:43:22:9a:84:
43:2f:1a:99:61:11:42:8e:83:fe:2f:9b:1e:bf:e4:
f5:fd:69:03:e4:9c:e4:eb:7e:cf:23:5a:da:4e:96:
e9:a9:b3:9b:6a:c1:12:54:00:c4:1b:40:29:17:d3:
e8:26:59:69:80:f2:c6:da:18:e9:83:c2:e5:70:bd:
9c:bb:7d:b7:97:38:1d:ca:80:1e:39:36:5d:70:a6:
c2:b9:e1:d3:e3:d2:c5:0e:1d:a7:56:59:d1:95:b2:
2b:c1:b7:c2:c2:88:19:6d:15:78:f3:fb:67:41:4f:
e6:fb:2b:4c:f9:77:06:81:6e:61:a4:90:ca:12:5b:
54:91:bc:ca:d0:43:c1:52:70:04:a1:0a:ad:6a:95:
53:17:c2:a8:47:5f:9e:d4:bc:27:e6:48:f5:db:ba:
18:f3:8d:d6:8b:37:8d:2c:59:cd:18:f1:2f:61:b6:
05:02:9e:b4:0f:01:d4:c1:21:03:b4:44:7a:f4:1f:
ad:d5:7f:f9:11:23:e2:62:8b:5f:77:28:0f:3a:b8:
7e:e7:d2:7c:73:34:33:85:3b:68:fb:c8:42:8b:50:
90:d0:d1:b3:b1:f6:d8:ec:12:19:51:48:4b:bf:f1:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B5:F0:8A:3E:83:98:02:BC:21:2B:E0:D4:BC:CC:F3:B5:01:BF:F4
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:f0:86:0e:9c:8c:16:d3:30:3e:d3:a7:2a:d7:91:00:fd:
b7:69:36:89:79:88:ba:6d:45:d0:f7:c0:e8:86:04:e2:9d:cb:
a3:a9:e5:31:91:10:61:56:51:9b:41:c3:c1:80:49:0c:e4:0e:
49:0c:42:5d:0b:bf:39:e9:e1:cb:fa:ea:bd:ed:2e:bb:09:ff:
e9:40:d6:23:ca:3f:00:af:89:9c:08:8e:2a:e8:47:98:92:20:
50:35:58:09:67:68:49:b0:4f:5c:27:c4:80:18:59:01:df:b0:
a1:c9:64:a0:c2:67:8a:34:44:db:c5:1e:52:70:ed:8f:26:5f:
2d:ae:d3:c3:87:2f:cc:35:69:5f:83:02:c3:16:9d:d9:75:43:
43:48:6d:7c:3f:31:68:cb:7a:27:3a:30:38:99:c3:b9:10:84:
16:a9:cd:4a:e0:8c:38:7d:f4:16:f6:25:d5:65:68:c1:49:71:
a7:4b:b6:d8:2e:e2:e9:6f:18:71:f0:13:15:1b:21:11:0b:60:
a8:0a:b4:aa:95:f3:90:93:45:bc:ec:d8:f0:bf:29:10:8f:14:
20:92:2f:4c:69:87:53:91:94:09:d8:50:13:d7:12:63:a6:73:
ec:47:cd:98:43:20:af:ab:df:f6:14:74:94:83:58:f0:25:26:
74:f7:00:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5F6zmkOHwJbl+f/k1LMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTVmNGEzYTdlYzY0MGM5MjM0NTA3OTk0YzBjNjVmMjhl
MmZjNTkwHhcNMjUxMTExMDcwMDQ2WhcNMjUxMTEyMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZGI1ZjA4YTNlODM5ODAyYmMyMTJiZTBkNGJjY2NmM2I1MDFiZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBMlnnjKiSIfe45nOeFc3I9+Z2ci
IR2tT0MimoRDLxqZYRFCjoP+L5sev+T1/WkD5Jzk637PI1raTpbpqbObasESVADE
G0ApF9PoJllpgPLG2hjpg8LlcL2cu323lzgdyoAeOTZdcKbCueHT49LFDh2nVlnR
lbIrwbfCwogZbRV48/tnQU/m+ytM+XcGgW5hpJDKEltUkbzK0EPBUnAEoQqtapVT
F8KoR1+e1Lwn5kj127oY843WizeNLFnNGPEvYbYFAp60DwHUwSEDtER69B+t1X/5
ESPiYotfdygPOrh+59J8czQzhTto+8hCi1CQ0NGzsfbY7BIZUUhLv/FeqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI218Io+g5gCvCEr4NS8zPO1Ab/0MB8GA1UdIwQY
MBaAFCSl9KOn7GQMkjRQeZTAxl8o4vxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUt
YmRkOWI0MzAzYzk2LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lNWM3Y2UtMDUxZi00OThmLTg4ZGUtYmRkOWI0MzAzYzk2
LzEvSktYMG82ZnNaQXlTTkZCNWxNREdYeWppX0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT37whg6c
jBbTMD7TpyrXkQD9t2k2iXmIum1F0PfA6IYE4p3Lo6nlMZEQYVZRm0HDwYBJDOQO
SQxCXQu/Oenhy/rqve0uuwn/6UDWI8o/AK+JnAiOKuhHmJIgUDVYCWdoSbBPXCfE
gBhZAd+woclkoMJnijRE28UeUnDtjyZfLa7Tw4cvzDVpX4MCwxad2XVDQ0htfD8x
aMt6JzowOJnDuRCEFqnNSuCMOH30FvYl1WVowUlxp0u22C7i6W8YcfATFRshEQtg
qAq0qpXzkJNFvOzY8L8pEI8UIJIvTGmHU5GUCdhQE9cSY6Zz7EfNmEMgr6vf9hR0
lINY8CUmdPcAgw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:29 2025 by rpki-client