Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: PX2Rtm0uK+/SVqBAxAh/yX2Easr20CEO2mUdQushYxc=
Subject key identifier: 0F:56:36:47:0E:54:19:E6:67:9D:19:10:A3:9D:F4:30:6B:47:DF:A6
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019A5119DCE68F6B971C8F0B3AF8430EA335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 09FF
Signing time: Tue 04 Nov 2025 23:00:40 +0000
Manifest this update: Tue 04 Nov 2025 23:00:40 +0000
Manifest next update: Wed 05 Nov 2025 23:00:40 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: QsG0SOZ8TzDJS8Qflxli2LRj7sW//OKInzzS2n8LS7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:dc:e6:8f:6b:97:1c:8f:0b:3a:f8:43:0e:a3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Nov 4 23:00:40 2025 GMT
Not After : Nov 5 23:00:40 2025 GMT
Subject: CN=0f5636470e5419e6679d1910a39df4306b47dfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:8f:8e:e6:b5:dd:52:7f:78:45:d9:d3:87:
36:db:b3:fe:49:7e:d5:e0:d3:d1:28:04:8a:30:60:
67:f2:bc:fe:66:57:90:29:a7:23:2f:1d:9c:70:69:
44:0c:9f:06:30:4b:03:d8:17:d3:71:11:5a:2f:33:
5d:79:5d:d2:f6:13:f4:87:44:c5:dd:01:3f:40:ef:
c9:f0:fc:c7:c1:e0:79:c7:89:31:2b:62:5f:e1:37:
d1:4c:ff:c9:f7:78:76:97:db:c3:63:f0:47:b3:15:
99:06:ab:72:8c:26:a5:e3:0b:31:95:0e:ca:1d:87:
22:58:f4:43:aa:53:71:ba:6d:ba:57:8b:27:d1:1a:
af:0d:82:e3:1f:a5:46:19:c9:3e:90:05:4b:29:97:
b9:2a:98:c7:56:14:b1:0e:82:4a:ec:14:90:8a:55:
a4:46:6e:95:f3:d3:ce:a3:3f:ad:67:d6:41:d1:5b:
16:b4:21:af:f3:e1:a4:d0:66:7b:76:85:25:92:c3:
a4:bb:cd:68:43:b2:87:38:24:4e:3c:2b:ad:eb:9d:
b7:d9:ed:26:3d:3e:92:54:08:81:3c:cd:76:c0:30:
ec:35:bf:f0:90:5b:3e:81:b2:6b:66:99:8f:44:c0:
22:fe:10:5b:ab:2a:88:52:64:4d:df:04:2b:b6:7a:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:56:36:47:0E:54:19:E6:67:9D:19:10:A3:9D:F4:30:6B:47:DF:A6
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:25:9b:0c:7d:d1:a3:dc:ff:cf:6c:35:55:89:4e:04:62:60:
b0:7a:91:69:53:36:51:42:eb:5c:7d:6a:62:c1:95:b9:bf:e2:
a6:f8:a5:05:11:e4:af:72:9f:a0:b9:31:29:2a:9e:ec:59:7f:
1c:d0:a4:81:8d:63:c1:9f:a0:b8:42:cf:88:9f:c0:70:9e:ba:
39:1b:3b:75:85:fb:fa:af:2c:b6:93:b4:0d:dd:65:9f:8b:15:
61:c8:c2:36:67:d6:2d:4d:61:ef:59:62:5c:67:e8:21:79:b2:
2a:e7:93:a0:1b:88:50:98:17:7c:ef:48:ad:cd:94:db:04:b1:
bc:5f:0e:e8:fc:5d:00:61:83:64:97:f5:1e:0d:72:80:c0:91:
4d:2a:f3:31:07:40:73:93:a4:76:41:7e:dd:dd:6d:dd:39:a9:
2e:1a:ff:37:c2:4c:7a:7c:84:4d:fb:d0:ae:5d:95:e4:65:6c:
76:21:bf:5d:99:1d:66:3d:91:fa:2d:fe:f7:5f:a6:14:d1:c8:
08:19:72:ec:10:41:e2:56:a8:b9:04:d8:0b:0f:b1:20:43:c8:
aa:94:92:15:9f:ba:98:51:78:66:77:8b:e4:4d:48:ec:d4:19:
53:f3:f9:22:d8:51:c0:8a:eb:75:b8:10:08:af:db:67:c7:75:
0f:0e:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:15 2025 by rpki-client