Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: cW2Pke1N4DV02sIPLFT3tXSJOsGJ9mfdWXMvljq+BhY=
Subject key identifier: D4:E8:4D:D9:B5:CF:9C:FF:91:C9:50:49:A4:A4:2E:88:C9:5A:51:A2
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0199FC8FCB5B5EA5CCF2BAB50E8C40118D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: YOAzZqsCvcGp51IY5mdGsSgMunNfwy9mYGtsf0PHCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:cb:5b:5e:a5:cc:f2:ba:b5:0e:8c:40:11:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=d4e84dd9b5cf9cff91c95049a4a42e88c95a51a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:6f:fb:1b:1c:2b:21:87:f0:72:46:bc:ee:
c2:ec:d6:fa:0b:fe:b6:5c:b1:7b:5f:03:13:c2:e7:
2e:21:73:9f:54:33:70:72:89:4b:27:42:c7:d0:de:
0a:3d:86:6a:38:7f:a3:9d:36:0e:85:00:28:36:f9:
09:73:b3:c0:1f:52:3d:24:d2:75:4e:58:36:f6:da:
d8:dc:1e:66:6b:f4:e5:63:2b:28:83:b1:1a:0c:ae:
be:3b:26:73:33:ef:48:3c:cb:98:09:04:3e:20:9e:
e0:4c:dd:f8:c8:2a:1d:4a:8f:af:b3:ce:d9:cc:72:
85:0b:ed:e8:b3:7f:ca:1c:52:10:ef:e6:4a:9a:ba:
6a:3f:aa:1d:8f:73:da:67:de:1d:db:8d:ba:b6:72:
3d:bf:e5:72:33:92:05:90:d3:e6:97:48:e0:a2:ec:
fa:b6:6e:61:e2:3f:23:10:d9:48:1b:fd:6e:88:10:
de:c1:44:85:c4:c4:b6:d2:9f:cc:19:2b:94:a2:2e:
21:83:08:d5:ca:f4:ee:0c:65:48:62:6c:23:a7:34:
01:a4:71:33:c2:27:e7:a4:91:de:88:07:c3:69:94:
5f:44:4a:a6:35:30:83:3b:a9:98:8d:79:9b:c7:04:
21:f5:b8:f6:9c:4c:7f:f9:94:c8:79:d1:eb:35:ce:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:4D:D9:B5:CF:9C:FF:91:C9:50:49:A4:A4:2E:88:C9:5A:51:A2
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:e0:68:67:9a:66:da:ad:a3:5e:ec:8e:5c:a7:75:04:24:
9b:83:47:f8:c0:ae:e5:f0:9b:e7:61:53:dc:83:e6:d0:48:fb:
c0:70:fe:da:9d:ed:49:1f:e4:6b:58:a9:cc:3a:02:6f:d4:47:
d3:f7:3e:e0:be:b5:71:71:73:97:2a:db:85:de:c8:3b:4e:c6:
4f:74:5d:b9:68:7c:f6:46:59:21:ad:f1:82:21:40:14:e1:5d:
d4:57:34:fd:ab:42:06:d2:84:85:ea:25:d6:ba:fa:85:e7:b1:
61:90:df:fe:e6:11:45:d6:07:63:dc:d4:a2:80:d2:1a:46:f3:
c6:9a:8e:44:99:2f:73:40:f5:cb:14:de:a4:6b:94:8f:a0:3a:
75:d3:75:eb:2e:c8:ad:f3:48:20:93:71:45:ec:0a:9a:9e:0c:
3e:35:4c:b5:91:04:7f:ef:37:7c:46:b2:ec:65:d3:3d:06:a3:
c3:6e:92:a3:9e:64:6e:ac:07:91:f6:c3:69:80:a7:f9:cf:8b:
1e:81:32:9e:41:45:30:90:6e:22:57:ba:2e:8a:1c:5b:a0:79:
e8:9f:e8:3f:f3:c5:0e:f5:4d:2e:da:83:d1:74:87:32:ef:e6:
e3:bc:48:29:f2:e2:bf:71:f3:16:38:80:e4:3b:df:0a:18:c5:
c4:82:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:06 2025 by rpki-client