Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: 26DFcjCLCN/ovtHMoMREOi6t41OsEE7zc7zAKLCwYe4=
Subject key identifier: 90:12:6E:BD:1E:B1:43:96:F7:BF:66:F5:B1:DE:5D:B4:83:1A:21:0A
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 019A4C61529FD0BDC660B230C92C106A831C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0EF5
Signing time: Tue 04 Nov 2025 01:00:37 +0000
Manifest this update: Tue 04 Nov 2025 01:00:37 +0000
Manifest next update: Wed 05 Nov 2025 01:00:37 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: 0U4qyMttVY2AozQBeVkV2MsxuKBs8YSuSLUcO9j73EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:52:9f:d0:bd:c6:60:b2:30:c9:2c:10:6a:83:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Nov 4 01:00:37 2025 GMT
Not After : Nov 5 01:00:37 2025 GMT
Subject: CN=90126ebd1eb14396f7bf66f5b1de5db4831a210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:fc:51:e5:0b:5b:ab:13:68:4c:35:de:6d:
86:de:eb:d0:94:c7:24:c0:d1:a7:ef:ca:47:34:72:
9e:7e:25:99:86:e8:bf:bb:59:82:69:32:0e:c3:55:
f3:0c:44:d4:40:93:87:3e:64:ee:05:d0:c7:b5:42:
51:cd:38:21:48:df:45:da:68:c9:89:ca:a0:fc:6a:
f2:e2:e9:02:47:f0:55:24:cf:c3:00:ab:cc:35:65:
b7:48:eb:71:89:51:0b:86:fe:5d:5f:a9:72:57:07:
95:b5:bf:ce:d5:70:64:43:c8:76:f9:5b:ba:41:8c:
6a:5a:52:3a:34:e6:41:44:cb:05:df:78:9c:62:40:
57:f6:39:ab:78:0a:b8:ba:0d:4c:84:a6:18:be:34:
df:7b:2c:30:41:f2:8b:4b:6a:3a:25:bc:cb:61:10:
fa:88:cf:54:13:53:b7:68:b1:70:db:c4:d2:92:ca:
2a:16:0e:29:73:92:32:2f:66:96:a2:56:ca:be:6f:
bf:c1:10:a7:ad:ec:03:84:94:ff:19:29:3c:3f:8a:
c8:d7:6b:93:2d:e9:a9:c7:14:60:cc:3e:ff:f8:62:
11:a0:46:75:e9:87:88:31:64:53:77:92:41:cb:41:
b2:30:8d:a8:96:09:d5:85:a8:8f:53:e1:d0:b6:30:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:6E:BD:1E:B1:43:96:F7:BF:66:F5:B1:DE:5D:B4:83:1A:21:0A
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8b:b7:5e:0b:2d:d4:5b:3d:50:0b:f9:93:68:9a:8a:bf:89:
43:fb:75:c0:5a:2a:be:09:93:b6:55:a6:8f:86:43:95:4e:aa:
d7:75:3b:9c:50:b6:18:94:02:dc:59:f0:02:ba:c2:97:17:1d:
fb:55:4b:79:36:f2:ca:3d:bb:40:9d:5c:c1:06:5b:f2:cc:e3:
ce:5e:5c:77:d3:78:9c:f4:40:b6:0f:41:5b:81:5f:3a:97:cf:
f7:d0:19:f7:db:b2:da:2f:26:87:2b:4c:6f:51:a0:e7:8a:1c:
e7:d3:26:a7:74:40:a2:15:a6:75:f8:b0:bf:19:5a:ae:78:d0:
60:9a:46:77:1d:9e:49:25:4b:f4:c5:1a:b6:72:c6:78:aa:27:
0f:56:c7:04:1b:a8:a9:52:cb:67:ea:cc:a8:b3:81:0d:e2:66:
f0:69:f3:92:c8:14:6c:34:f3:fc:18:89:fc:d7:d4:d3:b8:ef:
3b:e4:ff:0e:e9:41:9b:81:2e:12:33:85:b8:59:7f:7f:69:8a:
f5:9e:a1:ce:0a:5d:67:a3:ec:f9:7c:27:ea:fd:42:f8:56:c4:
45:79:37:2e:99:cf:80:52:ed:a3:c6:5d:6a:34:ee:7c:36:f3:
e2:87:ea:99:8d:01:43:65:44:37:cd:50:0d:82:83:7d:35:2f:
46:f2:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:47 2025 by rpki-client