Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: CGBPwk6Hqe7hyYTqn95a2quqyFlS1H7wAhImj1CRGdo=
Subject key identifier: C1:ED:BD:9D:F5:FD:82:A9:2C:6E:E6:19:95:C8:AE:25:CE:70:4E:FE
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 019A4F62AD7CEF6A517411E33371747A9065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0EB8
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: EVsY+MPrle/1OrU9R0E8+aDXFYKkHf6dHg66JR0pcG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ad:7c:ef:6a:51:74:11:e3:33:71:74:7a:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=c1edbd9df5fd82a92c6ee61995c8ae25ce704efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:0c:55:da:c9:c4:3b:b5:4f:63:48:b5:bb:
5e:75:86:ba:0a:0d:60:35:58:68:a0:3c:e1:06:85:
ae:ee:85:88:3f:01:5d:56:d1:98:7e:4e:3e:7e:f0:
93:46:ce:85:91:d2:f8:00:3a:88:d3:4c:75:05:08:
80:ae:0c:96:24:96:f7:7e:e8:2e:a1:07:d9:37:09:
61:e3:cb:61:31:dd:2f:05:0e:09:d3:15:b0:db:91:
1d:29:37:49:9f:24:a6:b0:1c:8b:72:31:15:56:e7:
93:c0:9b:57:26:aa:d4:48:3c:d0:19:d5:02:98:e7:
20:87:1d:ad:ec:ad:eb:a5:14:c9:f0:39:51:0a:bc:
29:85:b6:33:46:66:07:3a:bd:1d:2a:e7:06:c7:9a:
fa:4f:fc:8b:6c:e5:8d:cb:b0:27:d4:e5:91:f3:f6:
9d:59:b7:b7:b8:e8:21:1c:7f:01:e2:da:08:89:e5:
4d:0b:63:00:20:85:7b:7d:76:8b:2d:8c:f4:5d:55:
9a:cc:1e:d7:55:ae:1f:62:65:c7:92:02:95:20:13:
29:91:1e:1b:92:48:6b:b6:d3:b7:f6:33:38:d6:a0:
54:1a:4f:cb:e1:11:67:73:f6:8a:a3:df:df:5e:8f:
97:2c:dc:81:73:b7:79:ca:c5:df:a1:07:a9:fe:67:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:BD:9D:F5:FD:82:A9:2C:6E:E6:19:95:C8:AE:25:CE:70:4E:FE
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:c8:94:9d:d6:ff:b4:c5:08:7d:49:a5:6f:64:77:ac:34:
1f:81:36:0b:9e:e8:0e:61:61:77:52:bc:9a:dd:21:90:ae:8d:
04:1f:b0:af:81:ea:0e:f0:dc:ae:21:19:42:41:c2:d9:4d:6a:
ed:7d:f3:a9:85:6d:86:9e:c3:7f:c6:b9:fc:a3:9c:d7:70:96:
24:5b:46:59:88:79:de:05:f9:66:9e:5b:6c:92:a7:03:d1:86:
86:ca:f5:2d:fc:ae:89:17:d0:9b:58:05:41:47:bb:a5:dc:2c:
cc:83:fd:64:fa:42:88:23:28:6e:9f:9e:65:8a:d2:39:7c:39:
0d:41:86:41:ab:cb:62:e1:7b:e9:fe:e0:a2:08:7e:7f:39:1e:
96:ab:41:78:ea:73:3e:c6:76:8c:a6:17:f7:d3:c5:cd:68:52:
23:78:17:b3:76:2a:7d:bb:6e:40:65:f0:3c:25:52:2d:a1:96:
28:6b:24:5f:2e:43:79:4c:2d:ef:e5:c6:33:40:5d:f3:ce:a4:
5e:27:1c:62:53:5a:a9:f8:ba:f3:f0:40:68:f1:cd:97:2f:b0:
8d:d9:28:2a:63:47:9f:f2:0f:bf:28:c1:1e:f3:89:9f:c4:13:
26:c9:0f:27:22:79:a1:a0:b2:93:42:de:15:18:74:a2:83:08:
76:e9:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:26 2025 by rpki-client