Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: koWtdascwI6M114g5kAtqbu47X29ny14itSMW9MxRUI=
Subject key identifier: 52:1E:97:75:F9:6B:11:5C:69:4E:63:64:51:E7:BE:3D:87:D1:0B:A0
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 0199FFFE69C66F0BAEBCD222D8E08FAE68CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 0F85
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: pRqlzkL9Dpud1/ndFY2ulxDaES77B60zOPDf/Ah16SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:69:c6:6f:0b:ae:bc:d2:22:d8:e0:8f:ae:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=521e9775f96b115c694e636451e7be3d87d10ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:b1:b5:ef:71:51:e1:28:77:c7:1e:ed:80:
f0:e6:e4:cf:8f:98:76:2d:f9:85:68:30:29:58:b1:
f7:7e:63:b9:bf:2a:02:4a:37:ba:68:51:5c:0a:2a:
8e:16:d0:77:b4:76:b1:19:50:8d:0d:a0:70:6e:f0:
7f:a6:75:67:af:f5:f6:3f:c0:16:95:37:b0:87:5a:
a9:6f:d7:33:e6:8a:94:28:20:9f:24:7a:3f:81:01:
ca:3b:77:76:61:ac:84:a7:bc:5d:82:fe:61:25:c3:
9f:cb:ce:d4:18:29:80:e0:d0:c6:5e:48:ab:6e:7c:
9e:e5:5a:09:51:b4:fc:79:0a:0a:94:59:6a:31:4e:
96:b8:2c:6c:c2:44:51:ea:5c:cf:a5:73:d4:f1:e6:
6a:e8:b5:f3:9c:c1:b6:c1:31:12:e3:f7:2c:6f:31:
5f:4f:fe:00:10:47:16:e4:a4:f1:48:5b:12:7d:ab:
9a:19:8c:fa:05:ce:92:c6:58:4b:1a:d0:df:30:e1:
11:7e:48:fd:a3:c9:b5:15:73:ed:85:06:2f:19:a1:
20:10:75:9d:c0:9c:18:c8:6f:2d:d4:d4:64:c5:f8:
4e:c3:7d:23:02:fb:29:d6:26:75:5d:2e:62:78:b0:
e4:c0:a4:94:0b:e0:1b:97:6c:1b:fe:e8:60:08:99:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:97:75:F9:6B:11:5C:69:4E:63:64:51:E7:BE:3D:87:D1:0B:A0
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9f:cb:19:11:fd:9a:a2:9b:fb:c0:e0:8f:56:3e:f5:c7:1e:
7c:81:8c:8e:82:40:47:54:ac:df:f8:1f:ad:28:aa:c9:29:4a:
17:73:44:28:47:c7:2c:a8:96:be:dc:fc:bb:43:37:0e:29:7f:
74:31:e9:da:5e:4d:7f:b3:24:12:03:d0:d2:95:21:7d:d4:1c:
4b:80:63:8a:0a:01:cc:1d:b1:49:8a:a7:e3:c4:cc:cf:6e:9e:
a2:d1:54:dd:3e:e7:39:84:67:15:74:7e:d2:9c:82:8d:83:f0:
26:e9:5a:15:99:43:16:e0:31:5d:7f:98:b4:f3:e6:77:87:34:
59:d5:4e:b9:d3:85:a2:9d:84:ee:94:a0:e6:e7:69:e3:87:ee:
c8:5d:4d:40:28:2b:ec:0e:dd:6f:72:c9:95:0d:d8:4b:5f:38:
08:71:63:e4:47:c3:91:42:7f:84:83:1b:16:e5:d4:d2:36:42:
58:36:f3:01:18:4e:b1:0d:76:66:0b:79:50:76:53:03:b7:45:
28:ba:45:40:02:07:7e:91:b4:18:a4:ba:66:a6:2c:16:58:6b:
c3:05:bf:65:38:5e:b4:e0:48:d5:f4:a1:0b:c3:50:a3:f8:af:
9c:41:9b:2c:07:35:c2:c1:87:e7:a6:76:4a:98:2b:64:10:81:
b6:1b:c7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//mnGbwuuvNIi2OCPrmjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzU1YWMxOWI2YTFjM2UzNTM0NjQ2N2ZlNzBlYjU1MWZk
MmVlN2QwHhcNMjUxMDIwMDUwMTI3WhcNMjUxMDIxMDUwMTI3WjAzMTEwLwYDVQQD
Eyg1MjFlOTc3NWY5NmIxMTVjNjk0ZTYzNjQ1MWU3YmUzZDg3ZDEwYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0luxte9xUeEod8ce7YDw5uTPj5h2
LfmFaDApWLH3fmO5vyoCSje6aFFcCiqOFtB3tHaxGVCNDaBwbvB/pnVnr/X2P8AW
lTewh1qpb9cz5oqUKCCfJHo/gQHKO3d2YayEp7xdgv5hJcOfy87UGCmA4NDGXkir
bnye5VoJUbT8eQoKlFlqMU6WuCxswkRR6lzPpXPU8eZq6LXznMG2wTES4/csbzFf
T/4AEEcW5KTxSFsSfauaGYz6Bc6SxlhLGtDfMOERfkj9o8m1FXPthQYvGaEgEHWd
wJwYyG8t1NRkxfhOw30jAvsp1iZ1XS5ieLDkwKSUC+Abl2wb/uhgCJnA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIel3X5axFcaU5jZFHnvj2H0QugMB8GA1UdIwQY
MBaAFIx1WsGbahw+NTRkZ/5w61Uf0u59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi85ZWM0NzEtNWQwMy00NTQ4LWIzYjct
YmQ5YzM2MGFlMDZlLzEvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi85ZWM0NzEtNWQwMy00NTQ4LWIzYjctYmQ5YzM2MGFlMDZl
LzEvakhWYXdadHFIRDQxTkdSbl9uRHJWUl9TN24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ/LGRH9
mqKb+8Dgj1Y+9ccefIGMjoJAR1Ss3/gfrSiqySlKF3NEKEfHLKiWvtz8u0M3Dil/
dDHp2l5Nf7MkEgPQ0pUhfdQcS4BjigoBzB2xSYqn48TMz26eotFU3T7nOYRnFXR+
0pyCjYPwJulaFZlDFuAxXX+YtPPmd4c0WdVOudOFop2E7pSg5udp44fuyF1NQCgr
7A7db3LJlQ3YS184CHFj5EfDkUJ/hIMbFuXU0jZCWDbzARhOsQ12Zgt5UHZTA7dF
KLpFQAIHfpG0GKS6ZqYsFlhrwwW/ZThetOBI1fShC8NQo/ivnEGbLAc1wsGH56Z2
SpgrZBCBthvHhQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:15 2025 by rpki-client