Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: iDEvFecyxl8pAgigkiUvedbz3uPIwxZ2XttjUlt5IxU=
Subject key identifier: C3:BE:26:DD:51:2A:69:09:3F:BF:78:F8:9B:B1:A7:64:69:BA:17:E3
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 019A4D072632F0ED480F15568DC792A340E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0D39
Signing time: Tue 04 Nov 2025 04:01:45 +0000
Manifest this update: Tue 04 Nov 2025 04:01:45 +0000
Manifest next update: Wed 05 Nov 2025 04:01:45 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: a5obZQANa3ALUNfppt5qLfgCG9gEn5bEvPrmgAJW85Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:26:32:f0:ed:48:0f:15:56:8d:c7:92:a3:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Nov 4 04:01:45 2025 GMT
Not After : Nov 5 04:01:45 2025 GMT
Subject: CN=c3be26dd512a69093fbf78f89bb1a76469ba17e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:e8:a0:55:81:86:78:99:70:f4:bb:a4:4d:
a8:3c:9a:4d:1c:13:a5:47:f8:90:0b:20:54:39:76:
35:03:1b:15:c7:f1:a9:f6:14:ab:a0:08:3b:5b:0b:
0e:b7:e9:8b:f2:6e:94:c8:0d:f2:fd:72:79:d4:a4:
33:43:71:90:2b:69:07:6e:79:97:26:07:fe:fa:0a:
5b:af:f1:05:21:83:44:f2:bc:4e:3b:6d:9d:84:9e:
7e:39:6a:ff:70:44:61:af:90:52:3e:54:77:6b:ec:
af:cf:fa:a2:32:f0:25:a4:10:c3:84:85:e6:f3:ac:
e0:fb:d2:82:e7:10:fa:cd:44:c2:2b:7b:4a:c2:d2:
d2:03:8a:a0:21:16:4a:bf:f3:b9:8d:b2:71:a7:86:
32:9c:2d:7a:d0:2a:84:ff:74:39:11:1b:6b:05:35:
b4:32:71:4d:7a:85:b7:58:e4:d0:e6:1b:ff:85:07:
ce:b1:34:da:66:d8:92:07:a5:a2:6e:de:8c:2f:10:
01:5d:66:15:0a:a8:00:5d:64:f4:13:b7:68:21:c1:
fd:e9:97:94:7d:a2:b9:3e:84:62:df:11:ce:be:8c:
d5:4d:55:69:6e:ff:55:75:f2:35:bb:bf:7c:7c:57:
83:72:ee:59:52:a1:0c:71:0c:29:f6:94:1a:f1:0a:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:26:DD:51:2A:69:09:3F:BF:78:F8:9B:B1:A7:64:69:BA:17:E3
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:21:2e:91:04:1e:10:73:84:1c:b5:ab:2b:f1:b6:e9:21:
96:da:cd:a5:12:29:e6:5c:c5:23:c7:ed:36:8c:04:8a:85:fb:
e6:ab:05:70:ce:7b:e5:23:93:2e:1a:70:42:0d:83:93:2f:66:
49:b2:f6:16:28:d8:8a:06:1d:2b:6b:ee:85:0e:7c:1e:69:e1:
b4:69:93:73:91:37:b8:18:f0:c8:4e:e0:02:ae:92:ea:af:12:
28:17:60:83:49:d9:6e:d8:88:81:b8:11:26:ec:6e:4f:3b:91:
36:d5:ea:32:a5:f8:ab:ce:e6:55:48:96:90:5b:87:99:df:5f:
e9:1c:99:5a:1a:83:44:da:30:33:42:7a:c2:e0:77:8c:cf:19:
84:4c:f9:03:87:42:e1:a7:ae:9a:b1:5b:8d:b3:3c:d6:c3:12:
65:95:bf:48:87:f8:8e:0f:8d:c7:b5:d7:f0:17:d3:e3:fc:e1:
1f:41:9a:3a:b2:27:f2:74:88:bc:f9:56:b9:74:8e:e2:6a:92:
98:c9:5e:b2:19:c2:72:b5:7f:65:a9:70:65:96:d8:bc:a4:62:
01:79:3a:ed:b4:c1:a6:04:4e:07:b1:ae:83:5c:88:17:50:fd:
c3:ae:ef:56:f7:4f:e5:e1:9a:4e:69:f1:74:f1:1f:98:42:7a:
9d:82:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:29 2025 by rpki-client