Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier: EDssvh65sldDuwvERDwNZRX7/Cx7LRGYWxL+K2jgELY=
Subject key identifier: AC:76:FD:02:2A:99:BF:62:12:0E:BF:28:B2:0D:61:44:59:B9:AE:28
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 019A533ECB364F0ABA7095B644F3F999671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number: 0F44
Signing time: Wed 05 Nov 2025 09:00:15 +0000
Manifest this update: Wed 05 Nov 2025 09:00:15 +0000
Manifest next update: Thu 06 Nov 2025 09:00:15 +0000
Files and hashes: 1: 0hR_0c7RQJiSWec5GOXGTkJBB-o.roa (hash: 6B95v6L3QKq5sJN6SrWqfMlBSuwCIbwLv0Gvp6AwXSs=)
2: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (hash: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=)
3: SA-KGCApQAk5dV-uBcL4crTpK78.roa (hash: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=)
4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: QcO7JDD6o/gsdyuW9vJufqbM9GOkuTYaF4s2i/tms1k=)
5: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (hash: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:cb:36:4f:0a:ba:70:95:b6:44:f3:f9:99:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Nov 5 09:00:15 2025 GMT
Not After : Nov 6 09:00:15 2025 GMT
Subject: CN=ac76fd022a99bf62120ebf28b20d614459b9ae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:21:e4:1a:19:b0:8c:bb:72:83:ba:21:56:
c5:73:93:96:51:88:cd:50:26:6f:61:30:b7:85:50:
19:88:aa:a1:30:da:00:10:01:66:78:92:77:6c:8c:
2b:96:d4:95:98:67:52:3d:cb:b5:ca:94:07:57:e9:
fb:91:fc:49:0d:f2:d1:27:43:8e:d7:0a:71:ce:cd:
72:8b:71:3c:43:c9:b3:dc:44:8e:ea:f6:88:a4:be:
da:bf:2e:d9:f2:f5:76:d6:52:c7:03:65:96:9a:bb:
5f:0b:bb:14:ab:08:1d:5e:09:95:d0:e4:65:a8:39:
08:ad:90:ae:40:b8:b0:22:5e:09:52:70:67:5c:77:
94:6f:5b:16:a0:ca:f6:f0:d8:3c:13:0b:8f:09:e2:
9a:7b:49:82:9d:52:70:47:b6:89:9d:3d:0d:53:82:
67:6f:0f:e8:bb:03:17:01:ee:07:af:dd:9c:8e:d9:
89:fc:92:e0:b2:43:84:9f:22:b3:b1:c2:87:07:08:
c0:31:2f:55:2f:c0:20:20:dd:ed:69:3a:6a:db:fe:
57:41:8c:2e:c9:00:84:5d:6c:71:dd:1e:46:16:91:
22:e2:fe:ac:a7:45:73:96:c3:07:c5:15:b4:5d:d1:
f0:e1:07:25:cf:16:bf:b7:ff:9e:6d:72:85:56:ab:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:FD:02:2A:99:BF:62:12:0E:BF:28:B2:0D:61:44:59:B9:AE:28
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fc:0e:f3:83:88:7d:ae:81:38:ca:9b:b1:2e:77:dc:93:a8:
70:08:8e:0d:3e:b2:e9:c5:40:85:28:80:38:48:9a:63:ac:ab:
0a:90:2f:5d:76:86:d4:2e:f7:b9:eb:dc:fd:74:23:c1:97:3b:
57:93:d5:81:60:3e:6b:bb:a1:95:f8:16:76:87:c1:0b:e3:1c:
46:26:9b:71:31:f9:6a:f7:90:dd:fb:29:91:fa:21:54:43:53:
ff:9f:06:66:38:a9:f7:a5:ca:07:30:cb:77:b3:9b:7e:85:4b:
55:00:cf:46:b8:34:e6:2c:80:b6:cd:f0:e5:7b:8a:4e:39:9c:
cd:51:2a:35:44:15:79:96:d7:89:16:42:9a:fc:88:fa:7c:69:
b1:cf:7e:01:9c:dd:7a:2c:11:c5:28:83:02:2e:c7:39:f4:71:
87:ef:a9:fd:9f:3f:c5:31:ce:67:06:e7:3d:cb:5c:1f:05:27:
75:f4:04:45:f2:19:36:f3:8b:6c:85:07:96:a4:8d:fd:3a:a4:
37:f2:d1:c9:b1:9c:ca:3b:82:50:8c:9c:c8:59:73:61:df:84:
c3:02:7f:a1:b6:15:8a:5c:16:b1:df:b7:4a:d4:81:8a:6c:76:
b5:7b:df:cd:2e:a4:1a:55:e3:9b:65:61:d9:5c:3a:5c:f3:5b:
97:bd:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:50 2025 by rpki-client