Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: JNsYO4fHanWoSXXB6zaiATV3W7f6lju+zwnOfuqobwY=
Subject key identifier: 69:3A:FE:72:E1:55:0A:AB:E3:8E:0B:06:ED:F2:78:DF:B1:F0:56:99
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 0199FCFDAAE57CBA997021A435D40CE8D08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0D8A
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: PBfr5nzRVGul2HH97UJS0j01o5BRwm7rQUwMItUgtr0=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:aa:e5:7c:ba:99:70:21:a4:35:d4:0c:e8:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=693afe72e1550aabe38e0b06edf278dfb1f05699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:d6:a7:c2:b0:9d:05:b9:d5:2d:c1:4d:0c:
d0:ba:4b:7d:31:37:2e:99:94:77:59:3d:da:2c:10:
5d:2c:1f:81:13:3b:f3:31:41:f0:85:d2:d8:5a:fe:
f2:a2:96:20:21:dc:1b:a8:2c:b0:a5:ee:24:55:e4:
25:bc:1d:fa:b1:ed:7b:d2:d0:2f:bc:ab:98:c4:8b:
8d:d6:93:00:3b:19:01:80:f0:43:78:a6:7b:69:66:
f6:3e:df:df:6f:58:43:00:f8:50:5f:ff:10:43:c2:
76:36:d3:97:bb:57:bd:a1:5e:55:e7:aa:80:04:a4:
df:70:cd:88:ba:0f:9e:b0:ea:44:30:2a:74:8a:1d:
63:10:d0:71:07:b8:da:bd:c3:f6:03:d8:39:82:0c:
4c:16:9b:ba:c5:00:e5:f7:bf:e6:c7:4b:53:c9:4a:
7c:6d:f0:b3:e2:f6:05:67:68:e5:5d:af:bb:44:5b:
aa:dc:e9:15:80:6b:95:7d:79:38:54:52:cd:30:e2:
e2:ba:03:80:ae:aa:dd:f2:c3:4d:7e:b5:60:3f:96:
79:d4:ba:fa:f5:39:82:90:f7:15:52:e7:e6:8a:8f:
6d:c0:8a:7f:b8:60:5d:94:55:ce:69:2f:c4:4d:21:
46:83:05:bb:bd:b3:59:92:02:48:08:50:47:67:49:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:FE:72:E1:55:0A:AB:E3:8E:0B:06:ED:F2:78:DF:B1:F0:56:99
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:c9:9e:70:1b:28:eb:f4:9b:2b:7f:37:0b:af:e8:93:53:
1f:ea:a0:31:b5:c8:db:c0:7d:4f:64:8d:84:01:00:6a:20:5a:
52:2c:f8:f3:d0:55:7a:3c:91:4e:1b:ce:b9:16:c2:4d:12:07:
91:2c:91:38:55:59:02:b0:e4:af:77:67:68:b2:e9:00:a0:a9:
74:24:3d:01:12:71:66:73:e8:4f:3d:ed:23:f9:06:13:31:cd:
f6:25:ce:e9:82:f5:f4:d3:b4:e2:15:9b:5c:88:84:1e:05:cd:
b0:62:22:52:02:9d:bf:eb:65:52:2f:8e:7a:25:58:77:ad:a2:
b7:0d:8a:b3:88:1f:40:85:a4:59:1c:12:ec:c0:26:1c:d2:8c:
6f:1d:cd:4c:d5:fa:27:cb:3d:2f:83:e3:57:cb:b2:c9:25:2d:
9a:e7:d2:f0:d7:8b:bf:29:4a:c1:96:4e:20:96:b2:dc:04:90:
fd:f3:97:64:8a:4f:0b:d7:95:87:b3:16:42:a4:3a:57:30:45:
38:e8:ce:7d:3d:fd:33:a2:dc:bf:58:29:9b:59:09:2c:61:6d:
14:ac:b8:d6:c0:59:18:85:9a:ad:73:8c:9c:9f:da:67:d3:2a:
bb:b7:e2:00:cc:74:e6:4f:ce:78:9c:90:b4:ce:a0:b5:e4:87:
3a:15:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:11 2025 by rpki-client