Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: zliRTzMc0kBkOK+pJ1Fr73N6uvRtUFeWyq8xdf3IH7s=
Subject key identifier: 12:DC:24:94:2F:3E:0B:68:DF:66:65:0D:65:CC:11:41:47:AB:34:3F
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 0199FFC83A11E3CDF426441ABC402FAAE301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: JxVuji0gPpr/+B9/1NONQgSMP1viUJLQd0KqbLWcyLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:3a:11:e3:cd:f4:26:44:1a:bc:40:2f:aa:e3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=12dc24942f3e0b68df66650d65cc114147ab343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:e7:d9:81:05:3d:92:1b:bb:53:b0:17:e7:
1a:e2:0b:2e:32:0d:75:74:84:64:6d:04:62:7f:7a:
06:48:ea:66:d7:e5:f5:e1:c9:8c:75:be:5d:39:37:
a3:b7:ab:04:53:06:fb:58:91:60:0e:83:a5:8e:96:
12:41:5f:50:e7:d5:72:2d:8c:00:5a:00:b8:32:2f:
99:fc:f5:ad:f2:90:56:9c:dd:38:77:09:83:93:2a:
3d:d4:40:cd:60:5a:4b:7a:e6:f7:ca:a0:b1:05:e9:
06:5b:18:dc:a7:93:c2:3d:5d:e2:a6:50:fd:a1:fb:
00:b4:7a:0e:9f:7a:ed:b1:6b:55:63:cb:4b:68:9e:
1f:b5:9c:e0:f8:5a:2a:b9:08:c7:85:fc:e2:bc:02:
3d:f6:00:5d:dc:fe:da:87:98:2d:00:8c:9b:c1:4a:
af:07:de:ec:5b:00:88:1a:64:83:65:4e:9c:1d:e8:
5a:4b:3b:bf:09:9e:01:07:3f:03:1c:2a:77:30:f5:
ff:7f:03:41:27:40:9f:cc:18:4b:a3:88:93:f0:41:
62:ba:c6:0c:c2:c9:f6:7d:cc:7a:f5:54:51:cb:75:
26:9a:35:b0:39:87:9c:47:f5:ee:f5:d5:3d:78:6f:
03:8f:ee:6e:96:f8:f6:3b:92:92:36:e3:39:ba:b7:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:24:94:2F:3E:0B:68:DF:66:65:0D:65:CC:11:41:47:AB:34:3F
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:a2:58:a4:6b:90:9c:64:d6:16:3f:51:4b:c9:d2:05:1a:
a9:ed:1c:a0:0c:93:87:d1:f1:95:80:ee:2c:0a:e8:53:2d:f2:
ba:f9:6f:31:63:e2:19:bf:08:04:b4:66:52:6d:df:11:41:99:
f1:59:6f:71:bd:9e:12:66:03:76:ea:51:c4:c6:f8:c6:e4:1f:
7a:ae:20:d8:71:43:e4:6d:cd:14:ef:2d:8c:41:0d:25:21:fd:
50:f9:4a:56:e5:5e:3c:33:2c:53:89:11:61:53:34:96:35:80:
46:cd:f5:55:fa:43:18:c0:ed:dd:6d:c0:93:31:3e:31:e9:96:
2a:bf:52:72:f4:6c:23:dc:a5:0a:a8:9d:91:28:20:c3:a9:e9:
21:58:ba:5a:bd:0f:a3:49:15:26:dd:21:ed:d3:39:bd:66:61:
6c:02:33:50:d5:89:ee:c2:00:7e:46:bd:0d:6b:d1:f8:3f:e6:
86:ce:74:e4:28:c0:15:2f:88:9c:64:44:49:1d:6b:62:be:42:
9a:34:34:7b:54:6c:47:58:d3:71:39:82:aa:49:ca:3b:61:77:
4c:fb:b6:36:68:94:27:e6:f1:c7:db:a8:5b:03:7a:91:bb:17:
34:95:96:79:dc:9c:02:df:92:e1:5f:91:cc:fc:c8:d2:e6:d7:
3d:2e:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:21 2025 by rpki-client