Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: AHuhh2ETRc+h89LK6UjpUqwt36tgJL+VbRHMQ2AZH7E=
Subject key identifier: 0B:34:12:92:94:10:4F:7D:E1:65:6D:92:2A:CE:54:AD:B5:76:65:4B
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 0199FFC83FAB972145D7BC1CF13E751BDE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: EZVchbi2pNLPrqUbbggmdEOzHK941JFDRPX8CygQgO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:3f:ab:97:21:45:d7:bc:1c:f1:3e:75:1b:de:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=0b34129294104f7de1656d922ace54adb576654b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:73:5d:34:c4:d1:53:e0:5e:8a:99:74:2f:
32:5b:d7:fe:50:77:f7:6b:da:d1:73:57:f2:ba:15:
4c:bc:6c:1d:a6:39:2b:bf:01:a9:c8:aa:08:dc:10:
a8:d7:f4:83:c4:86:c6:90:f1:75:7a:2a:8d:2e:92:
d6:82:88:2e:93:f1:b9:f5:ac:78:d6:d2:0c:57:69:
63:2e:7c:bc:e3:8a:60:61:dc:87:28:82:03:47:e5:
25:f7:fb:59:f8:6b:c3:5f:c6:94:5d:34:6a:bb:21:
d2:e2:19:6a:d3:d3:02:c9:b2:b7:4e:77:b9:6a:99:
74:b5:22:33:5e:29:f1:93:6d:07:6a:f7:4c:db:b1:
6a:4e:78:81:15:a9:c2:80:68:fc:c6:51:76:c2:a5:
cc:53:6c:3d:1e:b2:fa:bf:32:53:dd:23:3c:10:1c:
8f:9a:99:d5:39:7d:14:56:5f:4b:f4:78:e4:10:8c:
3e:df:17:0d:77:f1:38:9a:d2:29:46:cb:27:3e:56:
7c:bc:4a:91:b0:50:cb:58:36:0b:8e:90:12:ba:d3:
8e:b8:45:0d:77:2a:77:ea:d7:1f:66:bf:63:ec:28:
45:ef:4e:f6:c9:5c:58:ef:12:79:d2:51:48:fc:3f:
95:fe:68:4c:c7:a9:87:7c:75:59:03:eb:31:83:85:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:34:12:92:94:10:4F:7D:E1:65:6D:92:2A:CE:54:AD:B5:76:65:4B
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:9a:9b:0f:35:7e:2e:6a:7b:29:58:d9:c3:3e:16:ee:fe:
c4:55:9e:48:68:22:4b:ac:b9:54:82:c8:0b:4f:a7:77:4f:fe:
91:7b:31:62:12:bc:dd:b3:90:11:88:2f:69:79:b0:3b:3d:1c:
35:1b:1b:9f:a3:c2:ab:53:ba:b2:53:a5:3f:3b:4f:c3:12:be:
ef:f5:63:21:e1:09:57:79:1f:e5:9c:93:80:c0:45:ce:dc:ee:
5f:91:b8:39:22:bc:12:bd:9a:75:aa:7c:c6:8c:e0:2a:de:ad:
75:30:6f:1f:b0:5d:a5:a2:aa:b7:26:42:d3:df:06:f4:d3:05:
56:b9:48:0e:98:e8:8f:33:c6:0e:cd:93:61:6e:20:fa:41:7d:
bd:db:35:f3:dc:c2:42:26:64:e0:24:a9:09:dd:a8:54:79:6f:
49:1d:69:66:ba:5d:31:a1:0a:4a:c6:93:8a:87:56:1a:39:f1:
24:75:7e:1e:4c:98:7f:a9:39:2b:e0:df:f9:42:f0:97:92:a6:
ec:dd:06:19:c6:57:d3:8a:d5:77:df:24:fd:d1:1e:70:7f:67:
ac:f9:b3:8d:5f:8c:06:5d:b5:10:ef:27:e7:64:36:39:a5:8b:
ff:92:91:88:80:24:b0:8f:02:a1:e6:76:dd:47:b9:68:41:0f:
70:2a:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:45 2025 by rpki-client