Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json)
Hash identifier: 4Y76QQxerwrYChbyKEdgGpm/ZWCXLagMyNY0Dg0PY1s=
Subject key identifier: 18:C7:CE:67:4F:11:7B:2A:5B:65:8D:34:53:7E:38:FB:93:D0:9E:C8
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 019A4FD00C53855B2334FDE021B28722722D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
Manifest number: 081C
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: 7umHFkKl3GHod4xlL9GlqZnb58wFkgn637kFp4Ds/Mc=)
2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:0c:53:85:5b:23:34:fd:e0:21:b2:87:22:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=18c7ce674f117b2a5b658d34537e38fb93d09ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:5a:a1:48:7b:62:ab:fb:3f:9a:96:5d:60:
39:bb:77:7f:6a:6b:26:b5:ef:51:4e:11:5d:98:54:
28:f4:74:4a:45:95:b8:bd:54:08:59:c5:03:a6:9a:
63:bb:b8:17:f3:be:e7:63:b4:c2:a2:de:e7:d3:9f:
b5:fc:65:4d:8f:82:fa:4d:18:93:86:94:61:d0:fa:
f2:37:ab:d9:d8:62:1a:06:1c:87:c6:cf:bf:02:93:
52:2d:cf:bb:c1:0f:02:4d:17:10:bc:55:57:3e:9e:
a4:93:df:b9:ab:2e:4b:64:de:1c:e8:e8:e0:11:54:
e8:23:be:38:3c:b7:39:a2:b6:37:2e:64:b1:5f:fb:
1a:8d:20:d2:d1:d3:4e:08:cf:3c:50:73:47:9b:8a:
46:77:c3:30:e3:19:2d:09:16:12:c3:ff:9f:1e:98:
23:b5:89:e8:07:29:58:05:79:5e:84:01:cc:26:c3:
3c:62:fb:25:63:35:7d:fc:33:93:5d:72:a8:82:df:
0d:c3:f4:c2:a4:ee:01:6a:26:9a:67:83:15:dd:96:
45:44:c5:d0:92:e0:30:06:60:8c:b1:a0:cd:b0:4d:
b7:9b:83:55:a1:d0:94:09:28:28:f3:7a:db:d1:fb:
33:34:02:06:ca:12:e8:6c:b1:4a:66:01:9f:9c:38:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:CE:67:4F:11:7B:2A:5B:65:8D:34:53:7E:38:FB:93:D0:9E:C8
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:68:a6:5a:b0:55:a7:52:e5:0f:07:5f:23:1b:95:b4:ed:78:
58:10:56:eb:e9:2b:58:f0:6d:09:f6:a4:2c:fe:9f:bb:b8:84:
31:c5:48:40:2c:24:db:5e:00:f0:85:f9:0e:d2:32:05:b8:c9:
29:d3:46:0a:74:ea:f8:88:7c:69:73:4a:6e:68:23:d0:48:69:
6d:34:e3:24:a0:e8:f2:c0:68:21:76:86:7e:a0:6b:ca:fc:fd:
43:68:e5:ef:13:20:c5:be:7a:fe:8d:b5:d7:45:09:05:6b:e1:
35:5f:da:ac:f0:c0:9f:14:ae:60:88:1c:71:93:53:fe:1a:da:
4f:68:90:b6:d1:ef:c6:de:b8:ab:ac:48:0c:5e:3f:0b:01:1c:
5d:03:38:91:23:7d:96:72:99:ef:ec:5d:c0:eb:e7:1e:67:96:
88:1b:50:22:79:f7:bc:22:49:18:b4:ce:58:c8:f3:a5:98:d1:
26:86:24:20:ae:ca:31:35:c4:97:a7:ca:16:02:72:8e:8c:79:
1b:47:a2:2e:0a:d7:9b:a5:a6:45:85:68:fe:43:0e:6f:ca:e2:
b7:f3:8e:4a:33:b2:2e:6b:9c:06:c9:e0:84:52:47:10:25:fb:
52:6d:ca:70:aa:6d:7e:ee:24:b0:e1:16:44:78:d8:b4:0c:dc:
d7:5b:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:56 2025 by rpki-client