Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: kfN2qhvQUjrMovV3Xk0HL8VD7LNheNyndFIFNsULac4=
Subject key identifier: 64:E4:58:CA:52:9D:41:34:8A:41:02:32:BF:5F:39:59:61:5F:81:78
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 019A4EF58E60A4B6D4010474AEC06075D1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: yFNnPNvU1nJ48e0jPuZ1sb64oU/9a0j73K7huXXZVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8e:60:a4:b6:d4:01:04:74:ae:c0:60:75:d1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=64e458ca529d41348a410232bf5f3959615f8178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:26:2f:f1:6a:68:50:29:ab:f7:7b:04:49:
36:a7:7a:f2:e1:19:4d:41:c7:b7:09:c1:1b:fc:bb:
c1:b4:51:29:8a:73:30:12:a4:21:6e:78:15:43:46:
f9:40:e7:85:68:e5:b4:5a:66:fa:08:e7:51:f5:56:
72:5a:43:5b:20:d8:b0:1e:11:b1:d2:18:c0:4d:62:
56:5c:15:65:24:26:66:5f:30:4d:6f:e4:e7:6f:13:
b9:1b:ab:e1:1f:7d:0e:09:47:61:6f:7f:8c:b1:30:
ae:45:1a:16:e2:3b:ea:97:c2:65:ca:30:ff:0f:b2:
f9:87:87:9b:c5:ef:0b:95:7a:71:6f:00:59:af:f8:
41:00:39:1d:83:64:a2:d0:4b:c7:ba:0d:c7:e8:f1:
fb:d7:ab:85:63:41:78:d9:86:c7:b0:8a:c1:e7:2b:
b8:b8:57:8e:6a:ba:81:4b:aa:35:a8:a3:63:4a:ed:
80:ee:10:2d:32:ae:af:9e:17:55:dd:eb:e9:cb:7e:
0d:76:9a:c6:0f:ae:07:0c:c8:1a:0d:0f:b5:6d:67:
d8:3a:0e:ff:8d:8b:a9:2d:fd:f4:48:85:6c:fa:97:
34:bc:30:26:85:24:d1:1e:7d:2b:af:ab:7d:70:8a:
65:48:87:a9:eb:9f:90:a9:0a:07:69:13:5b:41:fb:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:58:CA:52:9D:41:34:8A:41:02:32:BF:5F:39:59:61:5F:81:78
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:e4:c4:08:71:81:1b:61:62:3c:bb:a0:64:03:e8:55:30:
e0:81:31:5a:f2:7f:fb:97:5f:16:24:f1:4e:ed:d4:5e:ed:86:
21:0f:95:bc:af:f5:19:18:0d:e8:47:18:3e:0d:87:77:fb:6e:
f2:80:31:3e:77:7a:ca:f8:2e:a7:68:95:30:cc:be:f3:db:44:
5a:de:21:9e:80:bf:25:c2:4b:bb:3a:c9:75:97:c0:ea:fc:fb:
d7:66:53:8d:dc:bd:9c:82:e4:81:dc:a9:32:83:8b:c5:c9:74:
4f:d4:58:ce:d2:69:4b:9d:77:e3:c5:38:f7:c4:7d:40:31:b6:
2b:e5:fa:87:d5:a5:e4:62:3a:91:b1:79:d8:9d:8c:60:0e:43:
ee:59:f0:47:d6:e6:20:07:fa:48:e2:c3:66:63:d8:38:71:b1:
d7:24:9e:97:5a:89:23:e2:02:44:39:f3:80:86:e3:3e:20:86:
2d:64:ed:41:fd:f9:4b:67:62:0b:4f:0b:fd:43:a3:dc:19:6e:
3b:8b:1f:41:25:7a:c2:72:5f:d9:9d:c4:9d:9c:59:c6:33:c1:
49:79:0a:33:e3:36:57:5f:3f:dc:b2:13:49:04:5c:88:07:1f:
6b:3b:6a:65:96:06:6d:85:5d:24:1f:2e:96:4a:3b:10:cc:b3:
a5:37:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:33 2025 by rpki-client