Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: vrvoWMXcxtx1/IRboPGmG2ATbKcHLGX7CzCE6IWt2co=
Subject key identifier: 9B:71:B7:CD:7A:21:D0:FB:89:7F:16:F3:E3:A1:23:2B:92:67:95:B6
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 019A4F98E4C500E3423B7AA62273AF097557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 07F5
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: 8XFTuEj4nqOjjQ3K9UAtE3NtGM0CEtx4vZ2voAVoXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e4:c5:00:e3:42:3b:7a:a6:22:73:af:09:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=9b71b7cd7a21d0fb897f16f3e3a1232b926795b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:a3:d8:48:71:8f:64:b1:de:50:53:b6:91:
31:b4:52:df:0b:80:2e:54:8b:22:38:c1:6a:d4:79:
ba:e7:95:36:b5:93:c9:86:ea:66:5a:77:7f:05:4e:
e6:7d:f5:42:79:07:b9:3e:e1:e0:1a:4a:5a:d5:93:
ec:6c:20:08:d3:ef:52:26:56:c1:53:52:9f:33:1d:
27:2f:01:2b:de:ab:22:69:4d:53:b8:97:48:d8:ac:
42:d2:f5:27:bc:ec:92:70:5e:3c:9c:bf:ad:6b:9e:
f8:18:a6:0d:ac:a8:12:c5:9b:ae:6e:ac:7f:1c:14:
3e:8a:f5:cd:1b:c5:e1:6b:77:f0:2d:8d:48:ab:37:
47:f9:30:ff:2a:ad:df:73:ae:b4:c9:ca:8c:00:ea:
11:85:8a:9d:fa:f1:f3:e5:c5:7a:03:4f:52:4f:32:
21:7e:0a:e2:f7:e1:0b:b8:3d:61:1d:97:31:7a:9d:
df:00:20:e1:fd:63:47:3d:46:8a:6e:5e:87:9e:b3:
71:51:58:df:d2:62:ed:28:96:d2:e0:e1:6a:53:a4:
61:3a:c7:39:66:fc:f1:1e:c5:bd:e9:54:ca:d5:39:
e3:26:39:0d:9e:4d:9f:7a:d3:3b:f4:02:7c:10:dc:
26:c1:89:c5:49:2f:7a:d7:be:73:35:ca:00:16:5d:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:B7:CD:7A:21:D0:FB:89:7F:16:F3:E3:A1:23:2B:92:67:95:B6
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c8:9a:bb:e5:bb:d3:ca:fd:c5:2c:13:1b:65:d9:62:00:15:
d6:76:e9:70:67:64:03:d1:0c:4f:c1:8f:91:1b:ec:f3:44:d7:
d6:71:34:48:aa:e4:56:8a:6c:50:14:39:87:7b:44:31:93:ca:
eb:97:3b:cb:aa:90:18:a5:5e:d3:11:8e:a6:cf:85:71:ad:e0:
d7:75:da:85:f9:89:3b:da:af:ae:58:3a:c8:3a:d4:3e:1c:d1:
ef:4f:b3:10:59:08:9c:17:7a:b4:39:2f:bc:5a:ed:19:15:d3:
ad:9c:04:7a:2a:8c:22:04:64:2b:e8:53:f2:cf:a6:4a:9c:27:
5d:ef:2b:fe:b4:c1:24:9a:ec:87:fd:70:7c:67:5d:a5:7a:f2:
d0:05:48:79:77:f4:04:f8:9d:ca:59:cf:25:53:f4:34:67:ea:
63:08:5c:17:ee:c2:7b:a0:ba:69:78:38:37:8c:a6:18:dc:cd:
96:6b:0a:25:59:b0:a2:76:9a:3a:9b:68:f9:88:39:01:72:1a:
63:67:38:b5:a8:13:0d:56:0e:61:04:1f:39:0e:bb:35:02:f4:
62:4b:cd:e9:f5:14:40:8c:fe:ea:a6:02:01:35:17:f3:5d:77:
3f:03:51:15:c0:6a:a1:4d:90:4e:13:f5:b9:fd:2e:36:64:2b:
b6:37:01:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:34 2025 by rpki-client