Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
File: jRHN6i8zL8ztMzil3x-y30Uh-OI.mft (raw, json)
Hash identifier: uogds+lOmnEem7GeNTg+sgSv0oNKd3Cf3Q3lL+9YsfA=
Subject key identifier: 61:FA:43:4B:54:96:3A:6B:C6:0B:73:29:F5:64:8A:CE:B0:0C:8E:4D
Authority key identifier: 8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
Certificate issuer: /CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Certificate serial: 0199FDD9B43145307127F5BA2553561EB8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
Manifest number: 11F7
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: jRHN6i8zL8ztMzil3x-y30Uh-OI.crl (hash: YWpIMbuUnMQaAavAMZF3iZ/2VSwAJOayAtHvikoDptQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b4:31:45:30:71:27:f5:ba:25:53:56:1e:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cdea2f332fcced3338a5df1fb2df4521f8e2
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=61fa434b54963a6bc60b7329f5648aceb00c8e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:65:c2:13:af:c3:d4:eb:1c:1d:e3:09:ef:
ad:0e:a3:81:9f:88:2d:0d:50:3d:5e:6a:74:cc:a2:
71:58:94:e0:59:92:b3:d6:fc:e0:ec:d6:92:9d:76:
ee:0f:1f:5c:d7:9f:3d:c8:af:17:9f:7e:ea:81:0c:
22:8a:1b:0f:ed:24:8e:3b:c5:e3:dc:f7:b3:e1:46:
6f:bf:b3:05:b2:df:cc:df:70:4d:e9:8b:17:be:64:
08:bc:2d:d7:ce:4a:ba:a5:93:b6:a0:3b:ae:05:86:
31:fa:ad:1a:fc:e2:50:7e:4f:c4:da:fa:4a:9d:e1:
07:46:e1:5e:44:3c:4a:b7:d4:8a:0b:32:c7:78:ee:
be:08:d3:f0:a0:87:c1:14:e5:eb:0b:aa:56:22:20:
db:a3:3c:55:01:9a:31:4f:28:88:ca:05:42:16:af:
e7:9a:c6:34:70:77:03:b6:80:58:79:6f:b6:ec:c0:
13:78:65:a0:47:98:aa:c8:00:d3:1f:ad:6c:c0:86:
4c:eb:d4:bb:50:87:1e:1d:35:3b:dd:50:39:d5:c7:
1e:da:55:a7:7d:09:5e:3f:c0:ff:5f:86:a7:26:ad:
1e:7a:23:4f:e0:2a:d8:78:af:88:35:1f:5f:a4:2d:
59:bb:cd:4f:e1:37:cb:05:40:33:6c:f6:d9:f5:20:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FA:43:4B:54:96:3A:6B:C6:0B:73:29:F5:64:8A:CE:B0:0C:8E:4D
X509v3 Authority Key Identifier:
keyid:8D:11:CD:EA:2F:33:2F:CC:ED:33:38:A5:DF:1F:B2:DF:45:21:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHN6i8zL8ztMzil3x-y30Uh-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dadd3-3e55-46be-94e1-c90658ebd697/1/jRHN6i8zL8ztMzil3x-y30Uh-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f1:0e:01:51:81:f4:08:cb:73:e4:98:ff:71:d4:8e:41:b8:
8a:2c:a0:a0:9c:3a:00:76:78:98:2b:4e:2e:9c:d1:11:e6:6a:
8b:eb:9a:60:4b:41:e4:4a:36:2c:bc:50:82:24:9f:32:c2:b0:
13:5e:b5:22:92:1c:55:66:42:11:64:be:dd:89:7a:54:1a:35:
06:29:5a:14:87:5d:d9:cb:e2:8a:18:06:62:69:2b:62:40:2b:
4e:91:28:81:f7:07:9b:a5:12:33:62:50:88:71:b0:3e:d7:55:
c7:6f:01:1f:24:e2:38:4b:3a:92:59:75:3f:6c:24:c2:c9:16:
90:9c:e2:88:9e:0d:54:1a:de:bd:cc:75:b7:5d:15:90:65:ca:
69:db:3c:c5:8f:1c:92:1a:5c:0f:2c:d5:aa:21:85:d9:ba:63:
37:0b:1a:41:4f:04:e8:5a:31:4e:ec:17:ef:6d:19:f1:c5:4a:
55:ae:86:39:11:58:d6:7c:74:27:9a:da:f8:ab:34:fa:66:29:
64:a6:1e:9e:c5:19:22:99:04:7f:e7:8d:b0:e6:41:1f:3a:c6:
9a:5d:74:bb:49:91:b8:09:dd:52:2f:25:ca:19:a4:9b:88:b8:
94:bd:cf:bf:cf:f4:89:65:5d:4f:a1:d6:40:2e:ac:a3:57:ce:
b9:22:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:29 2025 by rpki-client