Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier: OGEZejDJHQmAA4WNPXwl4Dr3IRqVjvFV5WGcPT3B7+Q=
Subject key identifier: 2C:A7:38:66:FC:D6:17:C6:EF:DE:8D:F7:CE:8E:6C:06:E6:56:10:BF
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial: 019A4F2B015F6DA561D69202264AAFD31875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number: 0645
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: aouNGpBvtmL6qgL6GZT+XL5EqKI+S2TNgs7+l7y2OG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:01:5f:6d:a5:61:d6:92:02:26:4a:af:d3:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=2ca73866fcd617c6efde8df7ce8e6c06e65610bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:ff:d0:31:b3:1b:5c:6d:98:b7:8f:40:5a:
d2:cb:2e:b8:f4:51:ac:a6:0c:e9:f5:e2:a9:fb:dc:
b8:82:74:df:5a:d5:1c:d0:ed:99:99:bd:7e:aa:ef:
b3:66:9b:1b:20:c2:60:3a:70:ee:e4:a4:d9:ae:df:
3b:7a:ef:6a:51:fc:04:e1:30:ec:f2:d4:40:92:cc:
b2:ca:69:b2:9b:b5:ae:5f:16:a3:a2:e3:1e:a0:2e:
e6:2a:9d:e2:fb:0d:6c:fd:6b:05:13:08:0d:06:3f:
0f:1d:26:91:4c:cb:fe:d2:c6:46:7e:da:14:33:86:
c0:a6:b3:3a:de:57:5f:0f:14:66:34:b5:b8:49:d6:
da:1e:d0:cb:79:90:40:66:a2:b5:79:65:98:35:ec:
d6:68:af:54:2d:72:96:ad:0f:0c:57:09:9b:74:e5:
ef:08:3b:46:4e:17:d6:b0:16:23:45:5d:db:80:af:
f2:6a:6b:49:a7:03:60:f3:da:20:b9:e7:05:24:ea:
de:d9:14:93:c7:a5:9d:c8:35:c1:94:94:1d:fa:c2:
6f:d4:e4:8d:fa:39:84:55:3d:2b:9d:73:f5:1a:ae:
b6:47:dc:64:c1:d0:2c:b5:3d:d7:33:a0:e1:57:b2:
6e:07:c5:f1:dc:1f:ad:b0:64:0e:fd:a1:a0:cc:7e:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:38:66:FC:D6:17:C6:EF:DE:8D:F7:CE:8E:6C:06:E6:56:10:BF
X509v3 Authority Key Identifier:
keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:19:59:b0:96:c1:07:84:e8:45:ce:6a:71:46:7f:fa:c1:3b:
16:d7:92:f8:15:b5:a2:a6:07:38:ad:f8:6a:9b:0f:10:f7:c7:
62:5c:14:8c:dc:66:a7:98:cf:b1:12:4d:4f:c1:f7:c3:00:92:
7a:d8:5e:64:f8:49:5d:14:cc:78:dc:78:af:c7:17:d0:78:ba:
fa:12:6d:07:2e:28:22:f6:75:35:bb:24:f6:7d:b2:5c:e1:f9:
6d:c0:94:bd:e5:1e:6a:a5:31:37:4a:de:a1:6c:0f:2f:b0:b0:
7e:d6:20:d2:a3:fd:1e:cc:62:1b:db:7e:6f:83:36:3f:22:69:
d9:bf:34:38:fd:21:64:6d:bd:04:7c:c3:3b:74:75:2f:5c:06:
17:fd:40:18:39:e4:7e:9c:1f:46:f9:34:38:a3:97:51:fd:58:
26:e6:c5:ea:ce:2b:7b:6e:31:0e:5e:7d:47:6a:e4:3e:1c:d4:
28:d5:9d:5c:0d:83:47:0f:0e:41:24:f5:6b:7f:1e:39:7b:29:
53:ae:a6:72:d5:fb:01:43:0b:79:f3:a8:87:2b:22:46:3a:bc:
c9:61:31:80:61:f1:26:4c:44:47:41:7c:64:5c:3c:9d:49:20:
ff:7c:84:d3:52:99:91:e2:b5:67:66:90:8b:60:9e:59:5d:bd:
06:db:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:47 2025 by rpki-client