Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
File: JpildU3unu9vIkViy4I5rIvbBbg.mft (raw, json)
Hash identifier: I+v+ARSAGD0KGdxW851uR5d23dxFtOKBQDS1B570F2Y=
Subject key identifier: 30:93:5B:87:67:2A:2A:FA:DE:29:27:E8:36:C0:42:33:81:17:5F:3B
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Certificate issuer: /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial: 019A4E18D39CE7314923D5CED92AADD82CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: JpildU3unu9vIkViy4I5rIvbBbg.crl (hash: 61kaVYEdGZy3pzSeSZODPQ26GLo9qSmT0p5LscjCPmY=)
2: aBjEn09c9jlvq3tyQ6uQKbAuHow.roa (hash: k2Il8Q6rfTX6EoDV8IvCybU7+NvXuouKuK8ZTUniptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d3:9c:e7:31:49:23:d5:ce:d9:2a:ad:d8:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=30935b87672a2afade2927e836c0423381175f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:af:9a:e0:54:95:89:ee:51:3e:ec:28:b0:
f9:3e:56:00:f4:49:0c:da:13:b7:08:37:98:5d:fc:
76:e2:ad:94:f7:7a:d5:a2:9c:e3:52:d9:9f:ca:2f:
18:47:9f:d8:95:1e:cd:be:49:6b:ff:41:b9:4a:4b:
b3:5f:48:06:54:6b:cf:7f:2d:df:17:7e:95:02:56:
9e:42:e6:fc:72:63:f5:89:b1:a9:8e:ac:96:c1:c3:
36:40:0a:4a:d5:30:b7:29:73:36:4d:de:0a:27:ac:
67:b1:4c:75:33:4a:61:25:f2:d0:93:ef:c8:f6:75:
d1:15:2d:3b:09:81:89:d9:57:05:77:9d:fe:cf:a0:
73:12:88:90:48:5a:1f:2e:57:ad:1d:24:9d:e8:af:
19:53:fb:a6:c9:d8:7d:e5:e6:23:ad:26:60:90:3e:
22:03:3a:83:47:8a:48:c8:0d:67:69:f0:e3:05:87:
82:8e:44:55:be:07:7e:f1:87:ad:d0:bf:8e:fc:ab:
8e:28:e5:dc:ff:50:ce:d5:06:85:d6:0b:91:86:73:
1f:24:ee:53:09:fa:63:69:a1:00:f7:e8:d2:8e:e9:
4d:40:ed:a3:c1:a2:ae:cb:4e:02:75:07:a9:80:4c:
39:9d:89:9c:27:05:7d:2d:65:c8:7c:f7:af:91:1f:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:5B:87:67:2A:2A:FA:DE:29:27:E8:36:C0:42:33:81:17:5F:3B
X509v3 Authority Key Identifier:
keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:38:5b:e5:ef:af:be:b9:f6:ef:b6:25:11:84:0d:92:8b:
b4:79:64:05:5e:fa:09:10:a6:c9:ac:59:9d:8a:c9:93:1c:7a:
c5:80:b4:8b:6b:11:a3:92:97:b2:d0:86:a3:9b:62:61:72:16:
e3:3a:07:43:24:56:bc:97:5c:7c:98:e8:97:b8:36:42:d8:d2:
80:43:d1:d5:e2:a6:95:92:15:90:a9:33:77:58:6e:88:20:4b:
bb:50:91:81:65:32:32:36:29:36:ef:5e:5f:80:67:84:cf:a3:
3b:6d:e2:19:94:bc:1f:5d:a0:ac:ed:ed:36:4c:9c:23:06:bd:
54:5f:eb:b4:c8:c2:58:e6:61:68:ef:8e:63:af:dc:f8:ed:b4:
58:06:33:ef:83:35:cb:e3:a9:33:7a:ed:98:0c:6b:dc:40:c8:
7c:9a:f7:33:e4:30:d6:dd:6e:ea:71:fc:ff:e0:d8:29:d2:aa:
ea:fa:c7:4f:37:ca:ae:9d:f3:00:4d:5a:d9:90:f3:2d:34:22:
de:e3:ff:df:6a:be:f2:06:0f:45:19:45:fb:74:22:46:bc:bd:
fc:0b:7e:c2:01:5b:7a:45:12:7b:c5:0f:0d:7c:79:a9:12:c0:
ca:6d:cb:99:f6:4c:7a:ff:4f:96:43:60:c8:44:bd:22:92:25:
2e:70:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:38 2025 by rpki-client