Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: kxZKnsPWuGGxp+P70BQtB9p7NQ7laIHHZxThtaQwaI4=
Subject key identifier: 39:FB:DF:28:75:4A:6A:0E:B7:C3:7D:A3:FF:F2:D3:1E:69:53:63:60
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019A4EF43EEBAF4118289AF2D3FE2A321631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0826
Signing time: Tue 04 Nov 2025 13:00:20 +0000
Manifest this update: Tue 04 Nov 2025 13:00:20 +0000
Manifest next update: Wed 05 Nov 2025 13:00:20 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: 5SlnEkxhiF9reyLV3i1n937K0Z0M1Sh8dn6PwaC5PFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3e:eb:af:41:18:28:9a:f2:d3:fe:2a:32:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Nov 4 13:00:20 2025 GMT
Not After : Nov 5 13:00:20 2025 GMT
Subject: CN=39fbdf28754a6a0eb7c37da3fff2d31e69536360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:f2:ae:43:0d:2b:f1:0d:9f:cd:94:c5:7c:
eb:35:92:17:30:9d:8b:db:45:61:63:4c:d0:97:f4:
c1:72:d5:15:99:36:e5:2a:d4:18:6d:54:46:f9:63:
91:82:de:45:59:64:8e:d7:8f:4a:85:ea:d2:43:05:
c0:16:93:64:e9:c1:44:3c:b1:11:45:c9:5a:3d:8e:
4c:7c:f5:65:d5:34:99:b5:46:68:f1:8c:45:70:2a:
cd:86:bb:f6:05:5d:de:03:00:9f:71:c9:83:9b:5d:
b7:5b:5f:6e:a3:7c:21:51:17:fe:11:40:fc:44:b3:
52:c1:05:3b:1f:16:04:a1:92:b0:3b:01:6a:a1:c7:
b7:3a:30:44:08:f7:58:c8:4d:7e:a2:83:35:e9:f3:
ba:57:93:cc:76:a8:e3:93:d7:fb:25:2a:58:6b:b3:
5b:65:06:d3:c1:25:e1:89:df:9e:9a:09:07:68:f6:
4a:2d:44:9f:42:0d:f2:e0:21:3b:c6:12:98:b0:5f:
c3:8b:90:81:22:97:0d:a1:61:2d:36:0d:f8:df:f6:
58:57:de:81:59:58:af:a8:7f:27:0b:11:1c:c0:60:
1f:e5:95:05:9c:6a:67:41:89:e9:ab:d1:d7:e6:11:
4b:cd:9e:65:c5:c6:b2:e7:ff:2d:d5:e1:33:21:86:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:DF:28:75:4A:6A:0E:B7:C3:7D:A3:FF:F2:D3:1E:69:53:63:60
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:da:7a:01:0e:13:55:f0:16:55:5c:9b:e4:31:79:bc:90:e0:
25:cd:89:eb:13:0d:5a:a5:b6:38:e6:b6:3b:58:9f:93:98:72:
8a:f8:52:d2:c6:58:c5:6a:6c:d6:e6:70:7a:e3:78:32:c8:6d:
20:19:ca:bf:27:74:84:c7:a4:2c:4d:05:aa:09:56:76:fc:1c:
15:f1:2e:cc:01:96:24:e0:04:b6:93:1b:cb:6e:31:d3:36:19:
23:2a:e6:83:55:2f:26:ce:68:81:b0:5a:90:57:26:25:21:a2:
ce:1c:b4:eb:1e:36:5b:5c:b0:fe:e2:2b:ba:d7:7a:ee:b3:46:
b7:52:52:4f:4f:42:1b:e1:6f:a7:39:e5:20:89:96:b8:ae:e2:
e4:dc:a2:55:af:ea:c1:75:95:2c:a8:89:cc:9d:d3:4b:1b:59:
49:7b:8f:56:96:1b:a5:8d:84:30:0a:fc:4b:98:5d:c3:68:32:
43:30:17:16:e9:e7:df:d1:40:24:c8:2f:b2:92:d7:3b:35:79:
47:62:2f:58:d8:53:f5:9e:2b:de:e0:1f:bd:c3:bb:1e:9d:0b:
61:9e:3e:db:a5:b3:7f:cf:59:62:9f:f5:97:e5:15:c4:a1:cc:
a3:2a:bb:13:2d:e6:cf:ee:c0:59:1d:ba:28:a3:8f:26:70:db:
07:1e:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:02 2025 by rpki-client