Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: vWB0vPML2wjWQyWGnhEbzKPOreKKLVUPyyJSgDTu3aA=
Subject key identifier: 21:07:E3:69:72:73:2B:73:70:5D:49:91:B7:77:55:FC:7A:11:38:7C
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 019A52D1E3F47F55CABA9E0C9535EADC6E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:01:18 +0000
Manifest this update: Wed 05 Nov 2025 07:01:18 +0000
Manifest next update: Thu 06 Nov 2025 07:01:18 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: VMmKmONGpuvq2lUVQ0xVODCgGvlzmt9yJyOLE4o47cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:e3:f4:7f:55:ca:ba:9e:0c:95:35:ea:dc:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Nov 5 07:01:18 2025 GMT
Not After : Nov 6 07:01:18 2025 GMT
Subject: CN=2107e36972732b73705d4991b77755fc7a11387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:22:4a:8d:51:43:f7:f8:fd:34:d8:a1:0f:
6b:34:ef:fa:3f:6d:36:1a:20:a5:2f:00:1f:78:37:
75:f0:fe:6c:e1:51:c0:6a:2b:6a:94:d1:08:12:43:
16:1a:b5:2f:1b:f4:97:04:cd:00:5b:74:55:53:c8:
03:4a:2a:c1:a1:eb:65:e6:b9:09:c6:ab:3c:d4:c6:
cb:2a:8f:d2:4d:fc:54:c2:ff:60:0e:2d:72:dd:78:
7c:82:ab:e2:fb:81:a3:40:ae:77:7a:96:a1:3f:e8:
bd:a1:f2:b6:e5:3b:5f:b0:86:7f:62:93:fc:25:01:
f8:3f:24:28:29:c6:90:8b:c0:98:8d:36:e8:54:ce:
7a:30:e2:7e:15:08:d3:fd:53:c6:f0:6e:68:c8:a5:
dc:96:ca:e8:5d:54:6e:7d:25:d0:c7:ff:bc:68:c3:
10:3b:ab:92:64:ac:b7:dd:0e:5d:26:a1:d6:33:42:
de:ac:0a:03:9b:c0:96:14:86:aa:14:31:ba:4f:f4:
6d:09:40:1b:e5:b8:48:8d:d1:5a:ae:b6:05:d2:da:
5d:08:2d:e7:d5:2f:60:04:eb:05:64:3c:8a:c4:c4:
1b:87:f1:8a:0f:d1:1a:ed:62:6d:c5:96:97:0e:48:
b7:0f:5f:54:b2:f3:d7:58:88:ff:42:a5:ac:59:64:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:E3:69:72:73:2B:73:70:5D:49:91:B7:77:55:FC:7A:11:38:7C
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4a:1c:41:47:58:1a:43:24:97:ef:a4:e6:51:6a:c8:4f:8e:
12:c5:be:b1:49:c2:a6:e6:d2:df:e5:bf:d8:c1:a7:48:08:c3:
dc:cb:a8:b8:55:83:ae:c2:f8:d1:5b:b6:75:51:68:14:97:d0:
7e:59:a6:45:bd:c8:04:92:08:fc:07:16:76:01:3f:f7:ef:d9:
9f:32:58:2a:25:dc:a6:4f:f2:7b:ee:48:e3:1f:2c:8a:31:c3:
1e:a0:ad:a8:2e:f8:bf:e1:e4:67:11:d6:67:9d:c9:f6:78:bb:
ca:67:20:d6:12:9a:61:01:da:68:67:ae:51:9f:2d:f5:05:02:
b5:c6:01:ce:06:65:84:a6:4e:a5:f9:6d:0a:61:d7:41:49:6d:
7c:5d:fa:25:b6:5d:ab:07:25:e8:e7:1c:9e:74:c5:29:ed:cc:
86:dc:6e:f3:79:bd:dd:89:ae:07:f2:e8:be:eb:93:7d:5b:ca:
7c:7b:2f:53:5f:32:59:71:ed:ee:f3:81:29:05:37:78:f8:81:
5d:b0:c3:a4:88:c4:99:58:46:63:ba:9a:64:10:47:95:1a:1e:
4d:1b:43:b0:52:2b:ac:64:ae:d5:a5:1e:fd:4c:3c:48:25:d2:
6f:c8:f7:3d:a7:97:c1:77:50:9f:0f:2f:e9:97:df:0c:05:a8:
ce:89:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:30 2025 by rpki-client