Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: UeQ8eA85UVtKALQt8jvzNcIsD14ULbyk97cdZe7PXJs=
Subject key identifier: 8C:C1:74:66:57:40:27:5D:BE:26:33:27:AF:23:F1:83:36:83:8B:5E
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019A4EF4BB58C7C62D1E6D87860849178E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: 7pxDIbqtnX6eDmWaUoRCo9U8jw+AvxHQrw9DT/oClDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bb:58:c7:c6:2d:1e:6d:87:86:08:49:17:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=8cc174665740275dbe263327af23f18336838b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:14:6d:5e:88:e1:82:f6:26:63:28:31:ec:
f7:ba:00:ae:3a:9c:02:1f:b7:22:c2:6e:b5:a0:a7:
73:39:bd:72:00:bb:38:3e:d6:c0:d5:05:40:43:d4:
df:2d:dc:fc:a6:c2:c6:50:07:5c:48:ce:7a:58:21:
0f:65:a3:cb:89:32:a5:a8:36:f8:bf:96:8f:91:0e:
87:81:34:29:cb:d1:96:b5:c2:b4:9d:c5:e6:47:af:
dd:78:7a:a1:85:98:2c:a6:51:dc:b7:84:e4:94:6e:
50:73:6c:1c:c5:e2:da:ac:2c:dd:15:ef:d7:f3:c0:
d5:dd:a1:f6:13:5e:a5:de:3d:c8:e8:72:61:be:80:
b7:d6:ea:ea:fc:1f:ec:66:a3:d3:28:b2:e5:ed:79:
f0:f9:ce:92:af:81:ec:9b:09:cf:69:36:ca:35:a2:
20:d0:92:d1:44:b3:fe:46:31:86:82:c3:c9:18:51:
22:af:28:b2:84:78:7b:6e:bc:2b:2e:d3:a7:a4:fd:
27:5a:f8:03:0a:7b:40:4f:61:d2:80:75:53:b6:87:
7c:99:de:1e:da:f8:58:9f:d9:3c:94:3c:dc:49:83:
5c:05:1b:ca:71:16:2c:85:15:52:be:70:7d:38:a2:
49:2c:c1:af:45:72:d3:5f:cc:9d:fa:61:69:3d:8b:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:74:66:57:40:27:5D:BE:26:33:27:AF:23:F1:83:36:83:8B:5E
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f9:e2:e0:f8:68:ba:41:13:fe:17:b2:1a:0f:5c:10:dd:b4:
c2:1b:85:e2:cf:04:4a:a8:86:9c:6f:6b:c2:22:5a:e5:40:21:
70:75:65:bf:54:47:15:73:79:5f:e7:a2:fe:28:cb:f1:ba:dc:
47:4e:84:1b:ee:d7:e7:3a:18:1c:5a:64:cc:7f:e7:de:fb:4f:
ad:47:a0:ba:27:14:ae:f5:e0:40:11:98:2a:19:d0:49:37:72:
c6:eb:94:f8:92:97:e9:52:60:2c:da:4d:c0:a1:06:6e:82:2e:
18:12:67:e6:52:3f:77:8a:7f:85:ed:af:26:70:da:40:b3:9a:
a2:01:a6:5b:a4:82:f5:e1:ee:06:58:c2:5a:92:c1:a9:58:54:
fa:55:7b:51:83:06:b7:4b:ae:f1:8e:b0:71:32:53:a5:e2:98:
69:eb:bc:a8:80:de:76:e0:bd:b6:7d:d9:a1:6b:00:27:0d:f9:
53:59:c1:2e:75:06:ec:61:4d:99:ce:ae:ac:e6:44:1a:c0:34:
fc:4b:d4:08:00:40:9e:25:b6:b2:ca:39:5c:bf:8e:48:9c:af:
29:4d:9a:bf:9f:0c:25:66:37:95:78:7d:87:bd:2e:f2:70:62:
be:6a:88:d2:c9:72:73:3e:7a:70:1a:d8:29:7c:0d:aa:e9:4d:
13:29:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:28 2025 by rpki-client