Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: gnLMe3Y+N6T/yDSYRctQbEKmjJ1W35ugQbTJqmSYkFY=
Subject key identifier: F3:3E:90:8E:F4:53:12:9B:07:39:DC:F9:5E:A7:E5:47:D1:6B:13:A0
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 0199FE7E04FF274B2EF5E31AD5645BDA3FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: ywu4jyKz6P/coh+oak3vHR9tSC+PAgKuXB8TlTG4+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:04:ff:27:4b:2e:f5:e3:1a:d5:64:5b:da:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=f33e908ef453129b0739dcf95ea7e547d16b13a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:24:0e:c5:46:f5:38:c4:29:42:18:a7:50:
97:73:d1:ff:5b:41:dc:cc:19:88:02:f1:75:92:47:
14:0f:62:38:12:0b:86:ae:71:9b:b5:3c:e3:a5:1c:
6c:4f:50:b3:f8:07:d0:f2:98:e2:5b:2b:8a:7f:75:
1b:52:3d:42:fd:5e:27:9c:54:7d:98:e4:7f:40:9f:
7c:c1:a7:f4:6f:55:f9:40:54:61:db:75:79:d0:48:
80:ad:c8:44:4e:26:9d:ca:37:bc:ce:ca:8a:b1:1b:
46:12:b1:56:5b:b0:6c:1c:1d:bc:ac:d3:06:85:cf:
21:be:ae:1c:cb:35:47:21:b8:e1:6b:35:2c:ba:f4:
2c:63:24:7f:ab:af:53:87:00:a6:38:7b:94:e7:3d:
3f:f2:bf:96:60:b3:57:33:57:c6:9e:08:6b:74:ab:
2e:67:8c:9b:07:0b:d8:29:b5:02:12:c0:19:50:aa:
b8:0d:3b:2a:53:eb:93:2e:19:e1:36:74:77:45:a5:
82:83:91:21:17:38:f5:6b:15:bc:af:20:70:ae:26:
1e:03:4a:d5:a6:f2:50:85:08:f5:3c:b1:79:6f:eb:
d8:18:d0:51:0c:e7:ec:1f:a2:53:b7:c5:af:ac:80:
bc:dd:72:91:b0:8d:9e:38:3a:da:95:76:f2:5f:a6:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:90:8E:F4:53:12:9B:07:39:DC:F9:5E:A7:E5:47:D1:6B:13:A0
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:b4:65:95:8c:47:6a:39:ea:12:1d:83:43:ee:b4:2f:bc:
6d:e1:2f:87:59:00:87:24:83:61:6e:97:b1:93:97:74:c3:dd:
34:84:fd:68:36:a5:03:9a:7e:7f:38:5c:42:b5:cf:69:1b:5e:
19:ea:df:16:96:bc:4c:3e:22:62:f4:26:d0:ab:83:c3:c3:be:
68:17:04:17:01:49:b6:67:80:17:28:40:ee:9b:9e:bb:b7:09:
ae:89:4d:ac:cc:53:a2:c1:e4:1c:ab:16:fc:76:64:c0:f3:23:
f2:03:d1:76:df:a4:9d:6c:35:0f:94:51:bb:34:6b:b3:ea:09:
7a:86:d4:1b:cb:5e:aa:50:79:2d:7a:6a:09:15:c2:b6:3b:d8:
35:a2:a1:d7:39:a2:06:b7:56:d1:68:49:d3:4b:b4:43:29:42:
2e:86:e4:7d:16:74:56:b8:6a:31:a6:7f:e8:b3:33:1e:7d:8e:
28:a6:4f:79:60:c4:5b:51:75:3e:0c:ae:aa:e9:3f:cb:ce:ef:
01:a2:18:be:df:e2:f9:44:7c:4e:12:95:98:5f:c3:57:e1:02:
52:16:2e:d8:54:7f:56:ac:78:2f:cf:ff:c9:6e:cd:90:ac:89:
95:4f:47:f3:c9:2d:6e:30:c0:ea:8d:ee:cc:da:79:2d:37:bc:
ea:fd:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:46 2025 by rpki-client