Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier: 1vtPxH3DZnTYVwhFtpTibuNmN+dmer6tqt78NHgWm8k=
Subject key identifier: CF:94:CE:1D:CD:EB:93:0D:C9:36:21:2E:2F:20:34:86:0B:FE:46:34
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial: 0199FE1036BC7449A2BB5E9A877E1CDF7C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 20:01:39 +0000
Manifest this update: Sun 19 Oct 2025 20:01:39 +0000
Manifest next update: Mon 20 Oct 2025 20:01:39 +0000
Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: I7KVRAN4r9qDJTRSwl5EfYZIk3/rVZFBaJyHVnitM3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:36:bc:74:49:a2:bb:5e:9a:87:7e:1c:df:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Validity
Not Before: Oct 19 20:01:39 2025 GMT
Not After : Oct 20 20:01:39 2025 GMT
Subject: CN=cf94ce1dcdeb930dc936212e2f2034860bfe4634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:5d:c7:e1:3d:8f:f3:68:14:e1:3a:6e:27:
1e:73:1c:0f:7d:f5:98:97:3c:7b:ca:7b:71:42:cc:
20:a7:a9:ab:16:46:51:ed:a2:24:15:f4:1e:7c:be:
a3:b2:5f:59:0d:67:9e:39:1e:0c:98:90:4e:e9:76:
2c:79:9f:de:ec:63:ac:7b:02:03:1d:9b:93:6b:da:
29:99:52:03:83:7a:23:5c:b5:9e:65:4e:90:ea:83:
89:34:2f:6d:be:90:cc:e7:f7:03:42:a8:ad:f3:2c:
b2:d2:aa:f8:1f:51:ba:04:10:9e:9f:ae:1d:fd:56:
4a:47:e3:b7:f1:49:7d:47:c9:f6:aa:78:2c:f5:b5:
33:9b:cf:f1:7f:c5:0f:97:11:4f:01:15:f2:13:78:
be:01:91:df:d1:05:d6:f4:b0:1b:bb:ab:ae:f1:57:
1d:0d:cf:1e:61:01:e0:df:42:fa:f9:f9:72:c7:c8:
42:93:e8:88:ed:62:00:a6:af:ae:2b:1d:e0:51:17:
a1:16:05:bf:ae:a8:89:f5:eb:23:56:96:b8:03:35:
ee:29:e7:cf:b3:e3:9a:60:c9:48:66:f0:a7:ae:61:
ef:49:3e:0c:59:e8:d0:5c:b1:4c:16:8c:af:51:0d:
f6:88:72:cd:a4:6c:c7:3d:d6:ef:53:e0:ce:0a:de:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:CE:1D:CD:EB:93:0D:C9:36:21:2E:2F:20:34:86:0B:FE:46:34
X509v3 Authority Key Identifier:
keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:e9:7e:63:f8:8b:60:63:78:d7:58:09:23:c6:b3:e2:f2:
f1:d4:d7:35:13:f7:98:4c:cf:fa:af:a6:62:2e:ba:5e:a5:35:
56:8d:1b:43:9b:ff:b5:75:02:b3:de:fe:3d:c3:93:71:bd:8b:
aa:58:1b:1c:0a:3c:db:22:ff:4d:83:8b:df:14:a5:f6:f9:8d:
df:51:86:ae:ee:35:10:c2:c0:89:d4:f5:d9:50:b1:e3:23:64:
eb:6f:30:e0:36:48:01:18:ed:77:8b:a7:cf:2f:d1:1a:fa:7f:
fa:fc:d1:9a:02:38:77:fd:3d:9b:00:f6:ba:33:70:c7:77:51:
88:56:7c:a2:86:3f:f7:be:97:e8:be:e8:50:19:bb:b8:29:b9:
0f:b4:e0:f7:85:3f:a0:26:52:42:e4:32:af:33:b2:74:57:b8:
93:40:65:a6:76:c2:f4:99:96:5a:b5:8c:8c:ce:dc:fd:1b:24:
48:08:46:42:76:44:f6:43:73:cc:b7:0d:18:83:ee:fb:11:d8:
3c:f1:ea:97:24:65:46:d9:32:3d:ee:04:24:4b:7f:f2:e1:7c:
7d:18:64:fd:54:ac:e2:d2:fa:8c:ea:b9:19:c8:b6:46:ff:0c:
31:70:4b:b8:39:02:83:3e:f3:5f:c2:75:7f:50:6f:10:e5:12:
05:db:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:50 2025 by rpki-client