Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: h2O8hLURXi7NM7GGP1vqlyZ4s3x5yeSr9EWfCZ5agH4=
Subject key identifier: 1F:E9:12:C2:DA:7E:70:CF:69:F9:F4:D4:9A:6E:4B:E5:DA:D5:B3:DD
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019A53E41980D89122E8C7A3B5F78259B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 12:00:48 +0000
Manifest this update: Wed 05 Nov 2025 12:00:48 +0000
Manifest next update: Thu 06 Nov 2025 12:00:48 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: eVLOpC38taAR7//KD0ZoejdPqU6Q2AUkmqopZ8BRSA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:19:80:d8:91:22:e8:c7:a3:b5:f7:82:59:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Nov 5 12:00:48 2025 GMT
Not After : Nov 6 12:00:48 2025 GMT
Subject: CN=1fe912c2da7e70cf69f9f4d49a6e4be5dad5b3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:5d:87:a0:28:66:19:d4:85:92:5d:0f:21:
f8:af:9a:f7:ae:1d:29:43:8e:5b:ca:e6:40:a0:6c:
8f:a8:4a:29:88:8c:0a:31:e7:4a:e2:c7:14:89:37:
4c:b4:a9:a5:88:e5:44:3f:68:6c:47:e3:0f:ec:80:
a0:dd:65:12:53:89:dd:30:e1:c4:53:0b:62:5a:bb:
52:24:8a:6e:9c:42:d7:80:e5:b4:d7:06:f9:42:34:
76:19:30:db:28:1e:e2:51:c8:e0:de:13:b6:04:6a:
e2:87:5d:11:57:e5:6b:80:4d:d5:af:72:b1:98:f3:
de:13:fc:6d:4c:d4:9f:a8:de:9c:0f:3d:9f:f0:a5:
00:2f:d9:83:55:12:f6:5c:fa:10:cc:80:07:67:a7:
26:75:e8:3d:bd:d2:29:c7:86:e3:64:88:02:17:14:
d0:da:6e:29:dc:23:b6:27:84:ab:c1:5d:1b:f2:db:
21:ed:4c:19:8a:77:7b:52:c8:40:7b:16:de:a0:7c:
e2:83:ec:91:3b:25:a0:d0:74:c6:38:fd:8f:4a:bf:
ca:0a:2c:88:2c:b0:53:4b:34:84:ca:05:71:e3:da:
0a:c9:f5:3d:80:61:8d:14:87:9c:08:39:56:72:e5:
33:25:c0:6b:fb:4c:76:bb:25:6c:49:06:3c:0b:ed:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:12:C2:DA:7E:70:CF:69:F9:F4:D4:9A:6E:4B:E5:DA:D5:B3:DD
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:02:ce:f5:ce:59:95:2b:78:91:64:e8:36:cd:aa:0d:f3:
4d:df:38:2b:52:f3:bb:05:51:6c:ee:51:42:ea:7f:e1:d0:cf:
43:4a:15:c6:c4:73:43:b2:b0:5a:e9:2a:18:c2:59:e9:a8:bb:
ba:64:10:c1:fb:8f:40:ec:32:87:f1:c4:07:df:80:dd:1e:8f:
f7:af:9e:a2:e9:f6:40:d2:9b:65:d8:d8:d2:4a:f0:70:3c:54:
78:70:7c:0a:94:0d:eb:23:cc:94:58:ca:31:a6:1a:20:98:f7:
bb:38:bd:6b:00:b7:aa:66:89:02:aa:a9:a0:14:ee:6f:c8:61:
8f:a1:5c:9b:00:18:c3:0c:14:a0:e5:bc:ea:12:ca:f3:94:eb:
2d:81:31:47:85:23:ea:88:cb:2f:6d:5d:f9:80:9f:c5:8d:96:
0e:e1:70:5b:39:02:6f:85:42:14:fd:27:6e:bf:e8:e4:7f:b3:
23:d5:a4:10:3a:43:c9:0f:90:e4:f3:51:b0:52:66:f4:02:af:
f8:07:c5:6f:1d:cb:a3:15:72:9b:55:2f:83:b2:47:44:e0:e3:
3c:01:59:5e:cd:59:a2:00:82:de:7a:0b:92:10:01:00:90:d1:
9d:0a:d0:90:02:7a:14:4c:10:a7:5d:b5:2a:43:28:8f:62:0c:
8c:60:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:39:02 2025 by rpki-client