Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: SYxIAQv1dMUAbW89CTigJ58eGRuPrKgx1SKxidzloEs=
Subject key identifier: B2:73:82:BE:23:1E:5E:14:E5:24:16:00:88:F2:F5:BE:4C:A5:0C:28
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 019A5006DDCAD7F7C360AF691FF6C3C636EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 0815
Signing time: Tue 04 Nov 2025 18:00:18 +0000
Manifest this update: Tue 04 Nov 2025 18:00:18 +0000
Manifest next update: Wed 05 Nov 2025 18:00:18 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: 40P1H5kmEiq+DdQpgvc9lnrGOUilfYGMX2Umu8EtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:dd:ca:d7:f7:c3:60:af:69:1f:f6:c3:c6:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Nov 4 18:00:18 2025 GMT
Not After : Nov 5 18:00:18 2025 GMT
Subject: CN=b27382be231e5e14e524160088f2f5be4ca50c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:11:82:df:09:c0:c7:87:2f:6c:e5:f6:aa:
db:b1:f2:cb:4f:64:01:dd:a5:ef:61:1e:d5:75:2f:
65:cc:85:46:14:1f:50:f5:f8:73:ff:2b:26:f7:fe:
40:7d:c9:83:f4:d6:4a:32:54:89:66:11:c8:6c:ea:
3f:0c:53:ac:84:05:88:2e:de:65:26:da:21:1c:c5:
2f:e2:6b:d6:bc:c7:a2:9a:40:00:6a:34:d5:50:11:
c6:a7:e8:62:94:6a:b5:a7:a0:5b:7a:0e:d7:66:c6:
af:7b:1b:cc:0d:ed:9b:47:83:a6:20:77:f9:f7:d5:
e4:10:c1:0d:05:26:28:4a:d7:48:40:2f:13:bd:81:
fe:8a:15:f3:ad:5a:30:95:37:a0:a5:ec:cd:75:51:
60:b8:c3:62:11:30:bf:14:fb:ff:05:a0:dc:c5:ea:
86:bd:55:6e:10:42:90:27:c2:8e:69:03:94:df:ae:
77:b2:64:46:c0:a5:5e:bb:97:58:44:d1:1b:a4:43:
c1:0d:05:22:ee:09:ab:63:02:49:65:f2:d2:a9:b9:
76:de:81:f0:70:5e:fe:ad:51:e8:6c:9a:9d:bc:b6:
47:a3:26:cc:0b:97:ef:05:de:f4:a9:46:ef:ce:e3:
75:d1:a5:7b:2e:76:87:2c:9a:0d:1e:8e:da:33:20:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:82:BE:23:1E:5E:14:E5:24:16:00:88:F2:F5:BE:4C:A5:0C:28
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:30:39:c8:22:b1:3f:a5:26:76:fd:d9:78:62:1a:b0:50:
4e:b7:a5:ca:d7:45:87:4e:4b:59:60:79:47:aa:81:27:f4:fb:
08:c0:14:77:ad:54:36:22:28:94:f6:0c:c1:e9:4f:70:49:55:
17:bc:89:97:b5:00:e8:a2:2d:c2:ed:a4:4b:18:9a:ee:6e:39:
fc:9f:d1:3e:d8:89:fd:69:d8:c4:42:ae:dd:1f:5a:48:d8:c5:
74:5a:42:66:5a:21:7c:20:f6:f7:be:aa:3e:8f:1d:fa:ed:e3:
d0:c5:db:9d:79:4a:aa:8e:19:61:62:09:32:6e:a2:6f:22:00:
da:5c:47:3d:7e:8f:40:fa:e3:0b:33:7a:18:28:5e:f8:24:c9:
ff:dd:50:2f:0b:8c:78:c2:0e:07:90:31:16:c4:91:c4:a4:8d:
99:10:ed:a2:60:98:5c:86:9b:ac:08:7b:7a:88:e3:f2:9d:64:
66:90:74:95:44:31:f1:15:49:23:7b:02:e7:44:c3:2f:36:8a:
d8:b6:ef:b0:cc:66:52:f7:41:c3:3c:44:4d:f3:78:a4:49:13:
2a:84:7d:fd:09:6a:d7:4c:79:b1:96:40:39:46:32:a4:22:85:
67:fb:2a:f8:26:46:71:8a:1e:c5:0a:f7:a8:5c:46:83:60:72:
26:01:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:12 2025 by rpki-client