Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: +eEjFQmyXARGWTsyFjfC9CcM/XjYvfodc3DV6dQ9RsQ=
Subject key identifier: D3:7A:A8:8F:57:8E:70:91:CC:73:33:5B:FC:57:45:C7:FE:52:21:46
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 019A70A52AD74CCF5D14B6BE140F60BAC3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0888
Signing time: Tue 11 Nov 2025 02:01:03 +0000
Manifest this update: Tue 11 Nov 2025 02:01:03 +0000
Manifest next update: Wed 12 Nov 2025 02:01:03 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: QESitnNp6YCV2t6S8F2Fsp3mpeuCuR93/ZUxsdfYRsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:2a:d7:4c:cf:5d:14:b6:be:14:0f:60:ba:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Nov 11 02:01:03 2025 GMT
Not After : Nov 12 02:01:03 2025 GMT
Subject: CN=d37aa88f578e7091cc73335bfc5745c7fe522146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:29:0d:b3:08:e3:8d:29:c4:7e:2a:a9:df:
6a:f5:59:11:06:77:4f:68:c3:c8:83:e2:76:10:a0:
5b:75:5c:73:f8:60:28:62:d4:c8:58:e5:7c:c6:c4:
bd:64:74:15:5f:b7:b1:d5:9e:44:90:21:f9:c9:3e:
3f:d6:b1:28:6d:a8:93:a7:c9:03:47:5b:83:44:0a:
fc:ae:4b:79:2f:67:72:c6:e8:ba:bf:84:9d:b0:d9:
84:f0:17:a5:ab:8a:9c:7b:f9:fd:82:ff:68:dd:af:
a5:b6:80:1c:3b:91:f9:04:a9:e4:9b:d2:e0:58:c7:
b2:07:7b:a2:86:b6:2a:8c:14:e0:c5:b6:85:73:95:
a0:bc:79:b0:2a:fb:63:7b:7b:f4:3b:ec:a5:17:63:
f1:62:71:72:c7:fd:95:ef:62:69:27:3b:69:8b:e1:
ee:bd:8e:c9:3b:f1:26:44:e1:56:fa:e6:5c:38:e4:
07:07:99:57:5d:77:5c:92:ea:17:ae:b7:95:76:ac:
ea:cf:87:15:5d:78:6f:7f:cd:42:c0:53:8e:3a:b0:
2a:5a:21:8e:c1:c3:44:51:e4:87:dd:7d:04:ab:13:
8c:11:3b:12:ff:8a:6e:ed:87:7a:7a:9e:b4:d1:1c:
13:a0:33:63:0f:20:4b:bb:7a:55:fd:c5:ee:bf:21:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:A8:8F:57:8E:70:91:CC:73:33:5B:FC:57:45:C7:FE:52:21:46
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:29:ad:94:ba:e7:a0:b3:e5:f1:a3:80:96:15:3e:9f:d6:
a1:92:95:ba:c2:18:81:6d:1c:03:6c:fc:84:15:d6:bc:7d:28:
49:02:22:a5:2e:d9:09:ab:54:6a:0b:7a:9b:4c:6b:41:6c:3f:
4e:c0:b4:d8:97:7a:bf:14:d0:72:df:7e:47:b3:10:25:db:4d:
c4:15:cd:32:3d:5c:6e:17:df:97:99:59:59:63:60:bd:ab:2f:
b7:aa:ee:ae:29:66:a5:8b:db:1a:96:f7:67:87:bc:c8:c5:e1:
fb:d4:73:4e:f0:1c:53:0d:32:47:10:be:ed:f5:eb:18:21:e8:
0b:0c:e6:fc:45:b1:e8:f5:1c:32:e0:27:37:48:06:0c:3e:b6:
8d:f2:d2:a5:2d:c5:69:b5:c6:9b:a3:cd:5f:63:f7:4d:0c:c0:
4c:99:90:e7:dd:c6:86:5f:d2:38:04:6d:03:ed:f0:c4:51:c6:
d0:40:1e:64:04:33:8b:7a:c1:b3:fe:e4:c6:83:42:7f:8b:34:
a9:b2:82:ff:b7:ec:dc:fd:7f:5d:ff:3d:6b:eb:5c:58:28:81:
d8:69:0b:80:eb:f3:b8:fa:ea:ed:9f:f4:c6:2d:94:fa:10:66:
61:d2:5d:f0:25:f2:8e:9d:a3:5f:54:20:2c:a6:41:9b:ed:9e:
3f:0c:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client