Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
File: JNuhs13nN_cbfFUN9fS0ToNka40.mft (raw, json)
Hash identifier: ur8qUTUWP/DHwHpUfevs/qdFJX7v5M4iGlAoP/OO8YU=
Subject key identifier: 00:0F:4F:57:B3:F6:D3:B3:BD:7D:C3:1A:27:9E:3D:06:4E:CA:45:56
Authority key identifier: 24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
Certificate issuer: /CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Certificate serial: 019A4DAA950C6A70569DFFC69F23A6DAA61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
Manifest number: 0A04
Signing time: Tue 04 Nov 2025 07:00:16 +0000
Manifest this update: Tue 04 Nov 2025 07:00:16 +0000
Manifest next update: Wed 05 Nov 2025 07:00:16 +0000
Files and hashes: 1: JNuhs13nN_cbfFUN9fS0ToNka40.crl (hash: /EgoXqMiHi7nV63wW5hoNLX+k3sFX+bjjLU2zIGvS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:95:0c:6a:70:56:9d:ff:c6:9f:23:a6:da:a6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dba1b35de737f71b7c550df5f4b44e83646b8d
Validity
Not Before: Nov 4 07:00:16 2025 GMT
Not After : Nov 5 07:00:16 2025 GMT
Subject: CN=000f4f57b3f6d3b3bd7dc31a279e3d064eca4556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:eb:34:7a:3e:2e:30:5d:94:e2:14:3d:6a:
87:55:8e:39:52:77:54:0d:8b:43:3c:a1:52:9c:f8:
ac:ff:d4:d6:f7:5f:68:d4:33:1c:3c:04:e2:9d:ee:
93:e0:36:ca:7d:02:9d:99:bc:31:a9:a3:df:59:80:
3e:05:be:38:76:2f:88:28:6c:40:28:40:5e:32:da:
4c:ff:f4:d9:f3:f6:97:01:48:7f:fd:eb:d7:44:03:
70:5e:19:6d:fd:df:67:77:09:d6:cc:cc:4c:4a:a7:
af:29:f6:80:60:55:77:c9:3a:d0:98:92:79:21:a6:
cc:2c:63:3c:46:c0:8b:72:d9:15:55:19:8a:b9:fe:
fa:b3:35:ea:03:2b:8a:d2:26:83:73:d4:82:0e:3b:
e2:0f:12:ae:54:13:97:d9:af:f9:be:20:da:5e:9a:
0b:65:f0:b7:90:a0:50:f6:9b:ac:48:85:1b:a2:36:
2f:a3:0e:74:69:9e:28:05:26:40:be:97:ce:0a:ae:
5d:79:03:9e:e1:00:33:a4:d9:83:59:d6:0a:0c:fa:
4e:24:37:12:74:51:b7:04:c9:db:cb:12:bb:b3:c1:
c9:86:e1:4d:c2:a7:0b:8d:62:3a:64:a7:08:6d:a3:
cd:5c:02:57:dd:64:f4:1e:b4:dd:31:84:ec:5c:97:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:4F:57:B3:F6:D3:B3:BD:7D:C3:1A:27:9E:3D:06:4E:CA:45:56
X509v3 Authority Key Identifier:
keyid:24:DB:A1:B3:5D:E7:37:F7:1B:7C:55:0D:F5:F4:B4:4E:83:64:6B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNuhs13nN_cbfFUN9fS0ToNka40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/895e9f-d541-4564-9947-da04e2f39b88/1/JNuhs13nN_cbfFUN9fS0ToNka40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:01:bc:45:4b:88:0f:8b:73:9f:4a:82:2b:3e:ef:f5:8e:
4d:3a:e6:00:64:f0:d8:6e:69:13:59:74:f6:12:b6:7d:2d:a3:
ae:a8:dc:42:fb:80:00:d9:47:6c:e2:fa:17:63:41:95:76:a0:
cd:8c:b0:1d:e2:eb:df:6a:3d:95:ed:c2:b8:d8:ef:e9:a1:c0:
5b:95:95:fd:5a:d2:a7:85:bc:68:1a:28:d4:a5:cb:a5:5a:dc:
04:e3:ee:f7:46:d1:ca:37:11:87:fe:50:0b:9d:27:ae:d1:65:
d4:d8:f5:44:a9:53:60:37:50:e3:37:4c:2c:83:94:75:5c:aa:
94:5d:aa:06:51:7e:b3:e6:14:ff:fa:8f:4c:01:6f:e9:ad:98:
c2:3e:b3:6e:39:c9:fc:85:68:9b:af:c4:0a:19:e1:1a:90:83:
07:dd:af:df:71:b2:70:4d:26:d3:3b:6d:eb:28:0e:0b:27:b4:
63:53:fb:a8:01:3d:8d:b8:bc:6b:4b:db:3c:c5:9e:8b:fb:49:
5a:39:98:c1:61:79:7a:d9:08:61:dd:d9:d4:59:39:74:27:3a:
e6:98:f9:a9:6c:ee:34:e2:2d:95:ca:6b:21:f4:a6:d8:d0:36:
4e:6a:14:3b:13:a2:f7:57:74:f5:7f:9b:25:27:83:5c:d1:6c:
8f:df:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:18 2025 by rpki-client