Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier: hKIYSvNmRA24l3VnjiYwiULpTwRN8Qj9zM49gTKKzyc=
Subject key identifier: E4:F8:9C:C5:87:CC:78:E0:62:BC:7C:91:BB:D8:C5:72:73:7E:66:5F
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer: /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial: 019A4EF4B670012C25C0D4A8EFBA8E44EA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number: 1416
Signing time: Tue 04 Nov 2025 13:00:51 +0000
Manifest this update: Tue 04 Nov 2025 13:00:51 +0000
Manifest next update: Wed 05 Nov 2025 13:00:51 +0000
Files and hashes: 1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: dazKd8bixe062lf7Xq5G/H9qqIYDfZZpPtkcxkmE4/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b6:70:01:2c:25:c0:d4:a8:ef:ba:8e:44:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Validity
Not Before: Nov 4 13:00:51 2025 GMT
Not After : Nov 5 13:00:51 2025 GMT
Subject: CN=e4f89cc587cc78e062bc7c91bbd8c572737e665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:65:fc:e4:88:8b:7f:52:8c:c3:11:64:92:
a7:50:c4:dc:2e:a4:71:0b:a7:2a:d2:b5:bb:89:5f:
2a:76:12:ea:0e:68:44:0a:1d:f6:dc:71:d2:32:8e:
e5:9a:7a:18:42:46:84:1b:68:49:fc:34:c9:f8:f5:
fd:3d:52:68:12:ac:93:c7:8d:53:ba:bb:e4:a4:a2:
3c:ba:c5:14:52:02:9f:bf:a0:43:20:ea:08:0e:27:
24:ca:47:60:d8:a7:45:c5:bd:63:df:2c:72:87:38:
a3:aa:0a:31:2e:f4:51:14:28:64:b2:f5:72:2a:a3:
b1:f3:13:db:62:60:88:45:db:ff:ce:f6:da:b4:86:
8f:63:9f:a4:41:8d:cf:6b:91:65:bd:fa:a6:54:66:
af:c5:71:a5:54:31:7d:87:38:da:c2:3a:90:a8:4e:
38:24:fd:cb:ae:60:60:f8:11:55:72:ae:e4:9d:ee:
97:dc:d2:78:e9:c9:47:97:52:11:a3:a2:d9:e6:79:
75:39:87:bc:55:f5:82:66:2e:eb:81:5f:58:fd:93:
0b:78:7d:1d:14:d0:d3:16:9d:6e:d5:b1:fe:c0:58:
a3:68:12:7a:48:49:7a:1b:de:f6:f0:2a:4e:8d:1d:
2a:09:84:b0:24:52:d5:f5:2b:97:a9:a8:23:19:e7:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:9C:C5:87:CC:78:E0:62:BC:7C:91:BB:D8:C5:72:73:7E:66:5F
X509v3 Authority Key Identifier:
keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:72:01:0c:3a:2f:60:b4:19:3e:5b:b1:21:6d:84:2d:04:
b5:ec:7e:24:4d:8d:bd:a4:8f:3d:e7:87:fc:99:a3:79:1a:d3:
fa:d2:66:16:e8:94:5b:50:14:23:d6:65:81:dd:38:38:e0:e4:
4d:c7:a8:92:a0:73:13:3d:df:3b:20:bc:a6:68:d0:d7:1f:5e:
41:f2:dc:a9:87:2e:46:88:93:5b:5f:4a:f5:7d:b2:c5:7f:fb:
2a:53:61:f7:bf:37:51:99:3e:53:8a:08:33:83:f5:2c:0b:0a:
d3:f1:60:b2:71:3e:d9:cc:5b:34:d2:40:de:47:1a:a3:77:db:
31:63:51:de:82:60:d2:6d:f5:38:b6:5a:83:e3:e9:2d:61:36:
b5:de:11:9c:c4:10:86:8e:fa:26:92:fc:d6:1b:9a:34:18:b3:
c7:d3:c8:65:43:7d:71:8f:90:c9:d4:95:49:3f:94:0e:74:4f:
db:07:e6:ac:23:8c:8d:70:b0:7c:ce:49:c3:ee:55:4b:60:68:
43:7a:8e:b8:d6:3a:74:4e:41:b2:55:39:04:14:d0:30:a3:2a:
ec:9c:8c:a7:e6:04:a4:0f:eb:bd:77:c1:a1:19:39:5a:5d:72:
3d:67:dc:5f:17:d0:50:44:0a:3b:90:22:69:54:2d:67:a6:ba:
c5:7b:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:52 2025 by rpki-client