Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: 0EIxWvQA1AjWGtozGqAXHc56tObEebLTrA23RyTDucE=
Subject key identifier: BA:B2:CE:DA:35:72:17:18:4E:25:55:DB:A5:80:C1:F5:68:FA:8F:BF
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 0199FDD8EB45A435ECC44CB3CE84B3DFDC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: L8fdC5Lf0nM8IH01eKWy1J1aaoQjJQXKcBr9w6IBTes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:eb:45:a4:35:ec:c4:4c:b3:ce:84:b3:df:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=bab2ceda357217184e2555dba580c1f568fa8fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:ca:eb:e7:5b:36:de:5d:f3:c2:00:8b:6e:
91:26:3a:41:e9:a8:1d:a1:ed:0f:71:cc:0a:a8:2f:
f1:92:d6:c6:82:78:fb:04:3c:c0:45:d7:8a:15:9a:
5a:3a:6b:d9:bf:4e:58:7f:5c:05:26:01:d8:00:e9:
fc:b7:ee:d8:51:59:d4:58:ef:35:11:6d:92:40:1c:
f0:63:6e:bf:05:2e:b9:92:66:01:3c:c8:e2:a2:3f:
e1:3e:8d:b3:86:45:d5:ac:86:0e:40:96:17:3b:41:
3a:18:ee:00:e0:e4:b0:43:6b:5e:78:06:86:0b:dc:
29:9e:de:17:40:04:f7:4d:43:e5:9a:ad:f2:ea:4e:
23:df:37:db:87:28:33:73:39:04:3c:54:9b:6b:dd:
a1:13:49:b7:32:26:44:0b:b7:73:54:15:ab:89:2b:
36:93:8f:db:b0:09:66:74:24:93:77:bd:4f:7c:f9:
e3:1b:a7:48:0a:6a:06:bb:ef:e0:be:59:9c:58:15:
41:f0:26:06:27:92:b2:f0:79:9c:b2:82:fd:ed:e5:
7a:96:db:4b:36:1a:a7:44:7f:b9:ab:73:65:89:1a:
66:c4:0a:7c:1e:88:f9:16:bb:75:2b:b5:21:ca:07:
b8:9b:cf:5c:36:f0:f3:32:a3:90:72:87:66:3e:db:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B2:CE:DA:35:72:17:18:4E:25:55:DB:A5:80:C1:F5:68:FA:8F:BF
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:de:36:1a:5e:7a:82:5e:1e:02:5f:33:54:da:4d:bf:75:37:
9b:f8:76:b7:51:3a:a8:45:bd:e6:0f:f0:08:0c:48:99:cc:5e:
cb:2f:4c:9f:c5:ac:ee:e5:b2:68:0a:39:a7:75:6a:93:13:75:
1a:db:29:26:f9:3c:96:04:5a:29:bf:3d:97:4d:a4:48:72:f9:
85:10:6c:45:cc:71:37:35:25:87:e8:bb:92:ed:c8:17:24:13:
13:15:e2:78:93:33:b5:18:45:e1:c4:6a:07:7b:e6:70:c4:d9:
5e:d1:27:56:6e:65:62:60:86:be:d0:2d:e1:0a:29:30:8b:bb:
cf:99:fc:43:95:62:a5:d2:4e:43:ae:ee:cf:aa:81:29:71:f1:
8a:02:3c:11:75:18:6b:ea:1f:ff:fb:c7:46:4f:5d:0d:33:d8:
47:33:fe:f8:ce:e3:ae:50:38:f0:91:da:55:5b:28:65:36:3a:
ce:f6:2f:df:34:82:c3:f9:0d:4f:19:0e:40:69:b7:fc:98:ff:
18:f1:20:22:45:76:82:4b:96:a6:c8:65:db:1b:c2:c1:a5:24:
b0:e4:9b:80:e2:63:4c:3c:eb:7f:e1:0d:e0:51:0a:98:1e:cb:
55:3a:6c:2d:ed:68:ed:4a:5c:02:7f:f7:da:02:59:77:01:6f:
6b:3a:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:33 2025 by rpki-client