Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: w3fGG+9lWQ5Z4QDsLiVnEQzKLMLCJmGvSPAYl41wg34=
Subject key identifier: E4:6E:64:C3:F0:C3:1D:CE:50:BA:A8:04:A0:36:9A:45:62:2D:09:6F
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 0199FEB50F60BB8EFEEEECC85969CB202E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 08F6
Signing time: Sun 19 Oct 2025 23:01:42 +0000
Manifest this update: Sun 19 Oct 2025 23:01:42 +0000
Manifest next update: Mon 20 Oct 2025 23:01:42 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: g/CBl23pdxexGExDkgyE3+zWfy2+IXqWQskzNalLYsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0f:60:bb:8e:fe:ee:ec:c8:59:69:cb:20:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Oct 19 23:01:42 2025 GMT
Not After : Oct 20 23:01:42 2025 GMT
Subject: CN=e46e64c3f0c31dce50baa804a0369a45622d096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:e9:85:d2:de:ff:0f:c3:c0:93:6b:60:60:
ca:45:b7:8d:2c:ca:3d:69:f8:2e:ca:cb:4a:e5:30:
03:d1:cc:36:f8:a4:5c:3a:31:9b:6f:75:74:58:ef:
62:09:d6:a8:9b:c5:82:9c:7c:6c:33:c7:48:df:b9:
64:5e:01:51:5a:f3:79:5c:c9:db:d0:aa:f0:d7:cf:
61:87:5f:f0:60:77:f9:25:c1:83:c8:05:aa:00:2a:
f5:42:b9:c9:fd:2e:c7:4b:36:1c:56:87:56:e8:b9:
88:2c:00:2a:91:64:73:d1:fe:be:f4:cf:f3:bf:4f:
cd:ee:a5:76:97:80:79:af:46:b5:d7:ac:94:52:24:
61:0c:5b:62:60:02:d5:86:7e:95:7a:d4:f3:fd:26:
c0:ab:ea:9d:68:c6:df:67:a6:64:cb:97:d2:89:c7:
72:53:c8:37:cf:11:64:9a:f4:0f:3b:53:f6:16:a0:
d6:2d:64:f0:ac:e9:54:b2:17:44:77:59:ef:21:ae:
1b:68:b8:1a:44:72:11:ef:ca:64:26:ac:07:11:16:
c1:8c:0a:e1:95:4e:07:7b:09:24:e2:51:b9:8b:c1:
74:45:87:fc:b6:50:9c:08:38:60:3e:e5:cb:88:fc:
5e:a4:63:35:04:08:69:e9:8b:8b:f7:d8:ff:d5:25:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6E:64:C3:F0:C3:1D:CE:50:BA:A8:04:A0:36:9A:45:62:2D:09:6F
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:da:9a:3f:0f:78:de:08:12:a1:fd:7b:4c:1d:38:bc:7c:
1c:74:90:6a:a8:8c:4b:e4:fa:ff:ab:26:ea:b9:43:58:7e:a4:
0e:1d:8f:b2:67:67:86:db:22:44:4d:74:ab:93:a3:7b:80:fd:
b8:f2:8e:f8:57:fa:63:8c:ed:3a:b6:c2:fe:32:89:8f:3b:10:
2a:fe:5f:c3:f1:ce:d6:56:ee:23:48:04:11:72:44:af:30:75:
82:50:8e:47:71:bb:25:ae:45:3b:17:c8:87:f4:1a:72:ea:b3:
3d:67:b8:dd:15:3b:80:71:b9:c7:67:ad:cc:e0:dd:c6:a1:d1:
c4:9b:8d:b5:2b:ed:39:76:d6:96:da:42:53:5f:b7:a0:81:04:
15:09:b2:ff:0e:95:b3:b4:98:69:8b:53:1d:9f:76:ea:20:0e:
1f:7e:fe:49:10:1e:ff:78:c4:83:0e:61:5e:77:9b:36:df:a3:
42:34:59:7b:bc:3a:eb:95:7d:a9:a8:69:46:11:c3:5f:a6:b3:
d2:aa:57:5c:6d:35:07:8d:87:a6:a1:d8:d8:22:6f:e1:39:e7:
b9:58:8f:ba:4c:b0:96:d1:98:79:08:f2:7d:0a:47:1f:d4:41:
d1:ae:63:ff:49:3e:46:e4:e4:69:56:c6:cd:0a:0c:44:32:c8:
b6:f8:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:15 2025 by rpki-client