Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: XrsrTvMKtotn59bfCEqtvzLdkRqMavsnt4UUHb/az2E=
Subject key identifier: 65:94:E1:28:92:EC:39:F7:E0:0C:EF:29:D9:F5:9C:0E:F3:9A:5C:C7
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019A4E4F9BCFBBCEA4F6EF35947D038F3571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 161E
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: MRuu1hhtjX5mM2J7gJnlJbIxsGd4zy0FnW70ThTnnvs=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9b:cf:bb:ce:a4:f6:ef:35:94:7d:03:8f:35:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=6594e12892ec39f7e00cef29d9f59c0ef39a5cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:30:82:84:9d:fa:9c:7f:bc:c3:45:db:83:
80:cd:9a:40:ff:0e:82:70:de:b1:9c:ce:88:e1:67:
3d:7c:6a:13:2e:4d:f4:4a:ce:4b:89:b0:15:83:88:
ea:da:c1:84:d3:59:fb:7e:cb:2f:f9:5d:95:4d:fd:
12:6e:90:10:60:90:a9:5e:0e:0c:7a:34:c1:35:67:
18:dd:4f:f9:74:f7:f7:64:4f:7e:ef:de:22:e7:ba:
82:fc:b9:2a:1f:e0:3c:92:d0:15:0e:9a:b7:b0:e9:
57:8a:34:4a:52:58:33:76:37:8f:a5:12:51:93:de:
54:ca:a1:93:0d:44:37:81:4e:a5:a0:d3:ea:20:05:
86:4a:f8:45:85:83:ab:fd:11:40:4b:78:41:a9:22:
c6:d2:ee:2d:c1:1c:d5:64:22:ff:3e:15:38:aa:be:
f2:1c:e3:c3:5a:69:2d:2a:a2:29:64:15:55:d8:81:
6f:35:b4:05:54:8b:cb:12:05:07:25:c8:19:8f:79:
81:c0:7f:09:17:8d:6d:d5:6f:af:2c:c9:dc:aa:1e:
03:2b:5d:c4:4f:09:06:6d:3f:f7:1d:ff:e3:14:29:
f0:60:21:6f:d1:1e:5f:81:2d:fe:43:07:95:2a:7b:
04:94:f6:cf:5d:e6:47:8a:8f:12:4a:f3:e0:ae:24:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:E1:28:92:EC:39:F7:E0:0C:EF:29:D9:F5:9C:0E:F3:9A:5C:C7
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:24:68:c0:35:d9:b5:c6:79:52:9b:89:3f:5d:5e:2b:a2:e5:
37:ae:97:04:69:04:2f:44:c1:84:9c:e2:92:32:54:3d:71:03:
6f:0d:49:03:d9:01:40:1a:04:67:c4:31:30:4b:83:ac:60:db:
cf:17:92:96:81:08:65:43:97:10:b9:9a:45:78:24:15:f4:a6:
73:95:a7:d9:19:f7:66:e8:cf:ee:c9:d7:2a:ba:fa:6b:43:96:
43:ce:56:d1:99:a1:c4:4e:23:63:d2:44:2b:af:9d:3d:9f:74:
1e:2b:09:21:f4:bd:6f:bd:4a:b8:dd:8a:8f:94:87:b5:12:d7:
75:1b:ad:d0:8d:02:1c:33:34:32:94:ee:06:54:4b:ad:ca:e2:
fd:16:e0:12:3e:2e:70:84:4a:1a:59:4b:dd:d9:13:fb:84:c6:
2b:37:63:d1:12:f4:7d:2c:dd:c7:fb:9e:90:a6:8d:a2:63:94:
1f:5e:43:8e:e3:c5:3b:97:cd:7c:a9:74:bc:be:df:11:0e:70:
ac:ff:7f:ee:f3:39:e9:0f:16:19:e1:6f:87:b5:e8:f5:29:92:
02:77:ed:37:5d:9c:f3:46:78:4e:8c:94:bf:2e:e3:2f:00:dc:
ce:43:52:f2:88:2b:82:4a:5c:51:a1:f9:7d:6f:4f:d4:d4:f4:
98:33:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:56 2025 by rpki-client