Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: IO+7jcxZGbIfSxeCwE7Fnx6mSe4GHZEMaOPbjgpKLa0=
Subject key identifier: 6E:BA:C3:F9:09:E8:92:0C:3E:D0:B3:2A:3E:52:E4:6C:36:97:59:60
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 019A0259F2B05109453F3348C186EF9F5BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 16:00:40 +0000
Manifest this update: Mon 20 Oct 2025 16:00:40 +0000
Manifest next update: Tue 21 Oct 2025 16:00:40 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: 6rKXC9vscSVINOsgiqycp8Dx54rZRCSI5SSWbOhKvCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:f2:b0:51:09:45:3f:33:48:c1:86:ef:9f:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Oct 20 16:00:40 2025 GMT
Not After : Oct 21 16:00:40 2025 GMT
Subject: CN=6ebac3f909e8920c3ed0b32a3e52e46c36975960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:1b:45:f8:d3:88:ee:e7:43:39:0d:08:5a:
1c:ab:09:e2:65:18:cf:ff:cd:4b:c2:2e:df:82:a6:
0b:32:1c:e8:db:e0:dd:da:8d:b7:5d:ca:23:5e:33:
8c:1f:b4:ac:13:42:53:04:24:24:5c:be:60:f4:65:
b2:7f:8c:b6:da:f2:5c:d9:8c:d5:fa:16:7d:23:a4:
81:2b:15:46:f8:1c:a1:7b:49:eb:17:2b:4b:4b:6c:
4e:6f:95:1a:73:fe:15:40:0c:97:da:92:e5:70:90:
03:55:0d:3b:bd:66:11:06:19:81:48:23:b8:92:09:
bf:ab:e8:1d:a7:a6:85:07:3d:22:83:7c:90:58:7e:
c3:65:90:2e:30:fb:3c:8e:c2:b8:d8:98:63:b8:c7:
6d:6c:45:1d:b8:e2:dd:aa:25:34:01:73:69:3d:38:
63:65:99:2e:b5:49:45:6f:b1:eb:59:f9:f1:d3:05:
09:22:8d:0f:53:75:f1:bf:59:92:21:cb:79:48:7c:
c6:84:a2:8a:a4:67:80:d9:0a:4e:f5:2b:df:34:b9:
a7:0d:91:62:86:3e:e7:eb:e2:b4:95:6f:e3:0c:e2:
e3:3b:e9:96:53:5b:08:8a:64:b2:28:ea:41:32:a3:
4d:1d:86:99:11:46:36:54:4b:f2:a5:7d:69:52:df:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:C3:F9:09:E8:92:0C:3E:D0:B3:2A:3E:52:E4:6C:36:97:59:60
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:93:50:f0:0f:cb:56:de:64:86:dd:8b:34:0a:c3:21:80:
48:44:ca:81:9b:f1:c1:3f:1d:b3:37:e0:c8:75:8f:00:72:9f:
d6:10:45:54:50:0f:40:87:96:b8:c6:38:a5:b0:da:5a:52:37:
69:b6:c7:9a:cd:bb:7c:04:ee:0c:a5:97:95:dc:52:52:02:d3:
3f:e0:7f:64:1e:c1:f6:a4:1c:88:d0:97:d1:a3:34:bd:b4:e2:
1c:16:f3:e2:c1:9f:17:ae:f4:c9:40:9d:2c:ec:ba:af:7f:66:
43:d0:92:d3:0b:d2:27:ce:c3:f9:a0:cf:f0:05:a3:24:97:bd:
2f:16:9e:c5:29:2d:52:1d:65:e0:79:00:d8:7c:37:8c:50:c7:
09:fb:87:61:4f:89:59:d5:0a:92:0b:b2:6d:23:1a:f8:5f:1e:
51:fc:f0:ca:79:11:c9:50:5f:b9:37:1a:bc:0f:66:6e:9e:82:
33:43:e9:cd:18:9c:8d:3c:f4:a8:db:64:8e:35:96:b4:95:5d:
1c:06:65:c4:39:95:08:f1:01:ec:a8:a5:a7:fd:11:01:00:65:
f3:0a:ce:70:b3:05:a3:74:ce:35:85:d4:9a:2a:f3:58:d8:0e:
a6:28:33:99:9d:6d:73:1f:f0:2c:6a:64:99:f2:4a:59:34:05:
16:75:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:05 2025 by rpki-client