Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: UES5fyY6KGA7ps6jrPLi44j6P0BNo9WAcnJ830Bcr1w=
Subject key identifier: 14:F3:92:6A:58:68:D2:2B:78:C7:FF:3C:2E:2F:2F:ED:5F:F0:37:A2
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 019A4D73AE3306971C2447A84C21749C558A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 05DF
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: nZAAOkmftnpYQC6v05Q5kZvobJeffVCkDnUuEj6Gwoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ae:33:06:97:1c:24:47:a8:4c:21:74:9c:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=14f3926a5868d22b78c7ff3c2e2f2fed5ff037a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:63:22:87:80:11:58:c9:20:48:a0:61:f3:ca:
36:65:fe:73:0d:91:94:48:c4:27:81:fb:05:24:5f:
d5:1b:08:a7:b5:1a:94:e0:17:fc:22:93:1a:23:70:
d8:d5:f2:1b:e1:71:d4:99:9d:1f:33:8c:e9:54:d8:
38:c1:46:0c:95:a8:93:0e:c1:0e:f7:bf:03:66:ef:
74:5c:f8:0d:97:55:1d:c3:e8:5e:7b:89:bc:47:de:
a7:0e:04:9d:6d:72:cc:ef:65:02:14:e1:62:ca:34:
c0:4f:ee:9e:87:7a:ac:b0:4e:6d:f6:c7:94:7f:c3:
bc:30:0f:2f:36:58:99:a5:cd:ab:a1:d5:63:b3:95:
e7:bc:09:7c:5e:85:f3:80:50:03:6a:b3:58:c4:37:
5a:45:99:73:ce:36:10:64:0d:95:cd:6f:12:da:d9:
c0:9a:f4:bb:61:09:ba:ca:3c:63:62:f0:7d:ca:40:
03:2a:b6:17:6c:72:20:bb:a8:78:94:ad:a6:ea:46:
7b:d4:c8:9a:91:c0:c0:47:84:0d:5d:1c:b7:7b:be:
be:ba:5f:91:1e:c5:31:4c:41:85:49:ac:ac:5b:f2:
63:2b:09:36:71:c3:85:29:2d:34:50:c7:aa:27:19:
ca:22:b9:08:1f:10:99:30:fc:f9:69:2c:da:c9:41:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F3:92:6A:58:68:D2:2B:78:C7:FF:3C:2E:2F:2F:ED:5F:F0:37:A2
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bf:13:31:44:8b:f7:13:f8:77:f9:c7:a1:7c:27:28:c5:f3:
3e:87:68:26:46:cb:6d:26:79:1e:4c:91:8e:1f:6f:52:41:74:
49:c7:93:40:b9:d7:c3:7a:d1:29:fd:70:32:16:dd:e0:94:9a:
44:d8:18:cb:f0:57:4a:61:af:74:7c:2c:50:0e:e5:fb:64:ba:
6a:a0:17:bd:bc:08:7f:6b:3e:fc:a4:4d:dc:b8:1f:4e:17:fa:
74:db:d0:dc:db:bb:e5:7e:7c:06:8e:32:9b:8a:2b:8b:93:ec:
19:83:91:8f:29:5c:03:b7:92:5c:7a:76:fc:8b:00:48:bf:7c:
e6:9e:ae:02:eb:f5:8f:bd:e7:41:19:46:7f:84:08:68:7b:cd:
7a:09:94:9b:5e:85:7c:77:e7:be:e4:1b:5e:b0:4c:7e:85:03:
58:3f:18:2e:23:9a:44:3c:d0:7b:28:67:59:92:1e:0f:2f:d6:
54:fd:36:53:25:b0:bd:65:b8:7b:a1:f5:5a:e5:57:2e:b0:10:
40:d4:63:fc:37:5d:c3:db:4d:58:2c:d6:05:f7:6b:91:79:19:
23:ac:1b:42:e3:d0:23:e6:8d:ff:82:e1:9d:6e:51:fb:92:a9:
85:f2:75:12:eb:95:54:40:8e:89:d8:2d:cf:a9:1f:23:8c:e5:
3b:90:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:02 2025 by rpki-client