Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: CbmVoa8yE9OUhYol6pE3FRXot7BaV+RhbVtfje4pRrk=
Subject key identifier: 62:21:2F:16:23:06:50:50:82:5D:28:A0:FA:36:9D:C6:B0:C0:E7:A8
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 019A4EF5647FADE48FA522ECC7114676862C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 09FB
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: djSsqoemEbQr3B5D266ElIhLJuXZ8ELVCYTqGk9pfK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:64:7f:ad:e4:8f:a5:22:ec:c7:11:46:76:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=62212f1623065050825d28a0fa369dc6b0c0e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:a3:00:02:5d:05:f0:d5:b3:b1:11:e5:1b:
a3:24:f4:6b:34:86:af:59:83:34:41:b9:c6:b5:60:
a5:1d:15:47:02:88:86:98:9b:4b:74:fa:e2:0c:b2:
ab:e7:38:eb:24:6f:49:9a:e7:b4:e7:ab:6d:42:ff:
df:2b:a9:2a:7c:f9:1e:17:7c:c3:c0:62:bb:a0:11:
80:57:e9:9b:f9:10:f5:d1:90:12:49:49:3a:02:ee:
9e:f0:6b:3c:93:c8:44:6b:31:5d:59:dd:60:be:68:
72:69:0f:a3:ae:d6:0d:d9:37:f6:5e:46:53:27:3f:
4a:e0:b1:f4:6a:7d:03:5f:82:76:d2:d0:89:8e:97:
58:a8:3c:10:3d:52:c6:d4:8c:f0:70:3d:e8:63:47:
33:31:83:7a:64:ab:9f:24:ff:5e:40:35:d8:8e:1b:
a1:69:90:7d:10:fa:8d:40:8b:8a:e4:33:b8:d0:eb:
63:14:3a:da:79:60:34:22:9e:c3:ea:15:35:51:6e:
26:04:f2:4f:f3:97:20:4e:b0:bc:29:1c:11:dd:f0:
e3:b0:2b:98:70:58:76:a5:77:0a:c9:45:d1:57:cc:
f8:c1:c8:24:9f:d5:24:fc:ea:61:20:67:78:dd:6b:
3e:72:b8:d2:eb:24:72:96:7f:eb:5a:35:bf:16:1c:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:2F:16:23:06:50:50:82:5D:28:A0:FA:36:9D:C6:B0:C0:E7:A8
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c1:e1:d1:74:45:ba:34:36:92:6e:9f:05:f2:53:58:a1:91:
3c:45:a7:7a:2a:b0:0d:12:83:bf:e0:7e:e6:88:56:d4:48:51:
d9:e1:47:ef:fc:70:c4:09:0d:29:87:72:d5:d2:33:75:8a:68:
16:65:5d:7a:37:e9:3e:9c:5e:85:82:a9:b0:1b:8f:7c:3b:cb:
1e:77:39:66:77:51:ed:08:d7:f7:43:1a:20:db:e4:64:8d:31:
ad:43:97:9e:93:01:e7:e2:72:ac:19:bc:c3:2c:b5:de:67:b6:
f8:f7:74:f4:ca:ef:6b:02:2d:b1:c8:da:bc:13:53:9b:11:f5:
63:70:43:3d:80:08:d4:25:a0:db:65:11:c2:53:ce:aa:fe:2b:
17:27:76:26:b6:91:cf:07:5c:69:30:a0:20:3d:fe:2c:0c:bb:
26:d7:5a:c0:2e:fd:e7:aa:04:ef:8d:10:ee:98:bf:73:4c:21:
4f:28:7b:76:55:70:e9:ed:0a:a9:05:45:2c:ae:49:a0:0c:48:
c2:06:3c:28:e2:ba:f9:94:c5:bb:31:25:fd:d6:c8:6e:6c:f5:
d9:62:6c:da:04:b0:74:7c:98:b4:1f:f2:c6:8a:72:16:39:c9:
0d:18:a9:db:0c:8b:0d:d4:08:07:c5:c2:c3:7b:aa:3e:69:24:
56:4c:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:31 2025 by rpki-client