Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: UhoVLTiRwzR7KCpctbvfFLyGMxKQ/mdapzSb3MSWaB8=
Subject key identifier: 2C:B6:0A:82:68:22:4F:70:8C:88:78:D5:C3:22:07:57:C4:DB:B4:31
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 019A51198D003E507DB6EADF317D763FC669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0FAF
Signing time: Tue 04 Nov 2025 23:00:20 +0000
Manifest this update: Tue 04 Nov 2025 23:00:20 +0000
Manifest next update: Wed 05 Nov 2025 23:00:20 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: OfJYTEf4XXDSM9cp70Y7Cuy9JmztA0ppNybj05jCBoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:8d:00:3e:50:7d:b6:ea:df:31:7d:76:3f:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Nov 4 23:00:20 2025 GMT
Not After : Nov 5 23:00:20 2025 GMT
Subject: CN=2cb60a8268224f708c8878d5c3220757c4dbb431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:92:94:08:29:01:9c:44:9d:bd:8f:0d:7f:
29:ec:7d:41:45:b2:e3:d9:3e:43:42:61:26:b2:c7:
bc:1b:90:49:f2:27:1c:a4:83:81:34:75:88:ff:68:
61:56:1e:c2:c4:00:41:62:61:ae:b0:53:8f:62:11:
8b:f6:2e:a8:bd:c3:96:5b:75:45:bd:07:10:90:89:
26:5d:be:c7:0c:4a:a5:3a:ad:ca:d9:9c:f5:d2:69:
a9:be:34:85:a8:83:a5:8d:36:2a:7b:5a:ea:90:18:
c4:b0:3b:4a:c7:74:be:c4:37:84:0c:d1:48:70:22:
ac:ea:a1:11:ef:6e:2c:cd:ed:d6:97:d8:c7:81:66:
9f:b7:1c:43:8f:19:f0:34:04:71:10:99:7f:42:f2:
d1:cf:4c:6e:26:bd:58:63:15:e2:1b:12:c2:d1:28:
b9:1d:af:67:ff:d1:d3:29:ba:b3:6d:72:48:5a:28:
f5:5a:98:6d:8c:07:29:db:3d:9f:1a:ee:15:f3:3f:
d4:0d:36:4e:f8:33:bc:54:d7:40:f1:2b:4e:8b:f1:
4b:c3:7e:73:7c:4e:01:2a:02:f6:90:c7:3e:f1:be:
48:1d:ca:79:2c:5e:76:79:37:fc:1e:d0:20:50:d1:
04:5a:29:14:4d:c6:bd:51:4a:2f:b6:7c:17:d1:3b:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:0A:82:68:22:4F:70:8C:88:78:D5:C3:22:07:57:C4:DB:B4:31
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8e:5f:33:70:ba:4a:d8:7b:fd:3c:bd:0f:13:66:79:f6:7c:
d2:8f:49:1f:b5:64:53:04:f8:61:7e:d4:da:73:f2:da:13:d6:
38:d3:9d:33:b4:c7:c5:83:07:18:1c:c6:f9:22:e1:40:d9:be:
9a:ca:08:7f:ff:5f:fe:b0:81:46:d0:19:6c:83:58:39:4c:ab:
10:f9:0d:51:ab:1d:fd:6a:13:e8:94:9b:68:03:cd:a0:21:69:
d3:aa:d1:27:9a:54:73:89:7e:b8:fb:6e:c6:c8:94:ab:c5:7c:
02:9e:00:7c:77:2c:63:5f:95:52:d6:e6:5c:63:68:bf:98:14:
ff:6c:62:0c:c4:4d:80:42:5f:c5:46:c0:93:d9:69:96:15:98:
18:27:7a:5c:46:39:02:73:2f:66:8e:39:02:1d:b1:2a:97:dc:
7f:c2:2d:28:4c:7c:6f:89:e8:ed:6c:31:33:27:66:38:fd:cb:
94:83:b2:c4:00:9c:ca:5b:ad:d9:79:45:ce:4a:f2:4b:9c:42:
a8:38:bf:6d:2f:15:c0:a6:4c:a6:ff:fd:ae:3d:b7:7b:6e:98:
3d:b5:ce:6f:97:72:f4:7f:d3:0c:1d:b6:39:ee:e2:f2:84:22:
83:26:b3:44:74:2f:a3:2c:fc:c6:d0:ba:4d:0d:5f:67:bf:80:
a8:83:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:28 2025 by rpki-client