Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: mTR8V0ALoycd11i1jl7PsXOG8eF67vpgp5RyJFDx254=
Subject key identifier: 49:9F:30:C1:EF:27:37:4F:C1:93:E8:6A:24:46:17:35:13:4C:3C:B4
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 019A4EF4DD84EFFA94CB79E2385321103A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 144C
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: pNsh4xo6SaC6F3jYcuYbjwy4He7m1pD7C1EAYOhKfcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dd:84:ef:fa:94:cb:79:e2:38:53:21:10:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=499f30c1ef27374fc193e86a24461735134c3cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:3c:7f:31:76:72:71:38:64:65:40:2d:3e:
95:3b:b3:15:70:fa:66:0a:96:5e:ac:15:f8:64:7a:
61:8a:a5:00:82:2d:4f:0f:50:46:29:3b:67:49:62:
02:e6:87:26:f9:56:83:98:d4:80:bd:9c:ce:92:63:
15:aa:33:7a:63:7e:ff:38:c5:31:bd:92:e1:45:4e:
a6:37:16:b2:c7:c0:f4:c6:21:f9:10:7f:a7:83:c1:
82:a8:fd:f5:02:4e:d1:8b:53:12:b6:5d:33:67:e6:
0f:31:c7:87:0d:0c:2d:5a:89:0a:a9:7d:11:d5:22:
c0:b2:a6:30:65:13:ef:9f:26:25:53:d1:d7:cf:f4:
92:10:b4:97:b9:05:02:23:71:2c:98:9f:f8:79:d2:
8f:6c:3c:ce:47:37:da:57:cc:a8:09:23:88:c5:36:
4d:a0:3c:cd:4a:6a:e6:18:29:41:f5:77:de:50:42:
1b:fe:a2:e2:09:66:bf:0e:9d:69:8a:73:91:61:27:
2c:81:3a:ef:30:86:f7:43:f3:e6:cf:55:7a:4f:3d:
d6:9a:81:4a:b4:eb:ae:bb:08:87:82:5b:82:88:f1:
c4:97:5a:9b:9e:89:28:6d:38:e5:a5:85:15:f3:f5:
d8:22:b6:e9:0a:95:8d:6c:f6:5d:c7:ae:a9:9f:d7:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:30:C1:EF:27:37:4F:C1:93:E8:6A:24:46:17:35:13:4C:3C:B4
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:db:4c:22:66:e7:5d:d9:6f:b0:a7:6e:a5:8b:6c:01:57:
18:3a:01:b9:e3:0e:b3:4f:d4:33:1e:c8:2a:43:b8:f5:90:da:
e3:f2:c4:5e:d5:61:e9:0e:51:6d:e1:60:d4:1b:05:34:66:47:
90:60:d0:b9:87:30:db:74:25:0d:4b:a3:48:9e:e1:52:b3:a6:
3f:f9:c9:be:ff:65:51:d7:88:02:9d:bd:ec:00:2f:dd:71:7a:
9f:75:00:3f:95:33:d0:c2:cc:59:9f:e4:4e:bd:55:70:ec:66:
2e:65:1a:10:02:85:bf:7c:5b:21:5e:67:78:e1:ca:5a:be:29:
25:f1:ad:d8:91:5d:e8:2d:ab:77:29:fe:e6:c0:59:ae:9c:89:
74:61:d9:75:e5:a8:cd:77:dd:67:7a:f3:21:d9:83:f9:db:c9:
cd:f4:47:f6:9d:23:3a:3b:35:d4:60:04:6f:ba:7f:88:2e:e2:
5b:d4:41:be:04:af:b5:9a:ef:f3:66:ce:95:a2:65:6e:02:1c:
b0:b6:ce:f7:e7:eb:49:a8:36:37:11:ed:11:54:ca:65:f2:70:
f5:72:be:d4:89:2d:7a:f1:db:1c:06:16:fe:4e:65:de:c2:de:
37:2d:ba:6c:b9:ef:35:50:30:77:ee:36:05:c3:d1:e3:4b:cb:
1c:e3:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:38 2025 by rpki-client