Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: A7LS6ncjsvOAH2ug013eVtplOGiMq4LsyB62KV98Fe4=
Subject key identifier: 16:C2:4C:EC:DE:53:0F:79:38:BB:AC:5D:59:29:39:4E:3B:3B:BA:17
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019A4E18D3863B9BC5BA49FDFD798C893276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 09C2
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: 5gi3SG5bWFnaGzvYnhiJ/P22Rdk5yEsZ1wCgAQA+sDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d3:86:3b:9b:c5:ba:49:fd:fd:79:8c:89:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=16c24cecde530f7938bbac5d5929394e3b3bba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:32:4c:57:86:fb:56:ab:9d:0b:1f:60:1e:
7d:16:91:c2:f8:ca:87:cb:95:c2:5a:a9:e6:d0:2c:
ce:6d:39:66:65:c5:10:79:ae:03:d5:f9:d2:5f:18:
7b:a6:31:ff:9a:b8:20:59:f3:c9:d8:a4:75:11:56:
dd:72:87:ef:dd:30:d4:84:06:c8:f5:fb:1d:52:da:
85:e6:50:7e:53:ff:2d:f2:0c:ef:d9:50:15:d7:ef:
4a:c7:35:44:15:6c:78:95:4d:f8:82:1d:cc:3d:4f:
c3:00:70:ce:03:c8:1c:f9:dc:ab:3c:6b:a8:7a:c7:
9c:a7:a9:ab:81:97:8b:96:bd:65:63:45:be:70:48:
e5:82:d2:30:80:44:c4:25:04:a1:77:4a:50:73:ad:
87:fa:9b:ad:3a:7b:3d:0d:e8:ed:c2:f4:9d:be:c4:
d6:3c:5c:41:e4:3b:07:f6:06:e8:dc:07:51:a3:05:
20:66:e0:be:c4:55:d2:11:b2:87:e1:a8:02:7e:bf:
db:eb:17:57:d3:a2:ee:3f:2d:88:94:9a:69:8a:87:
0d:3c:db:98:f1:99:ef:f5:9e:67:8b:3c:fe:6e:39:
00:7a:4b:5c:77:49:4b:c8:1b:cf:ec:98:d6:63:d2:
de:a3:2c:7a:be:74:89:63:a9:fe:e2:51:47:25:6d:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:4C:EC:DE:53:0F:79:38:BB:AC:5D:59:29:39:4E:3B:3B:BA:17
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:01:0e:80:6e:26:e9:05:91:2c:e2:e8:b9:c2:cb:d6:60:92:
45:87:e7:4d:03:5c:f6:93:9f:9b:ef:83:e1:7f:ae:6a:c2:1e:
45:1f:ac:8c:03:21:c3:65:cf:52:69:f5:88:47:ce:9f:7d:4b:
95:1a:11:4d:42:69:38:3d:4c:0d:a9:bf:03:52:5f:cf:69:be:
16:e5:9c:4f:68:4b:d8:07:23:42:70:ac:58:3d:6c:70:f4:3c:
7b:74:dc:12:0a:13:e0:49:cd:00:6b:9e:e9:a9:3e:13:2e:36:
a3:9a:41:25:1f:ba:29:d4:29:47:36:77:76:93:dc:45:80:a1:
27:37:c9:60:27:fd:5f:f3:e5:31:b1:d7:c1:2f:39:6e:99:8d:
9b:ea:f4:e9:db:75:0d:0f:e5:a4:28:53:04:25:05:67:68:c4:
9b:e5:47:e1:bf:ac:94:56:f5:d3:56:a3:b8:0d:f5:18:20:26:
d6:fc:90:c6:41:13:5f:d9:b7:b0:37:e1:03:f6:5f:22:14:31:
0f:04:32:2f:b4:70:9a:63:db:95:bf:6b:5c:82:ce:62:08:14:
8d:d1:86:fa:04:3b:71:5d:d0:2a:75:09:f2:8e:53:74:72:92:
46:98:7a:4d:a9:d5:49:ba:6a:1e:9b:e2:84:8d:1f:69:32:fa:
dc:ed:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:53 2025 by rpki-client