Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File: jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier: xvRc1ZpDAOxnNppTdtID2iB9BTMfh96kvYw9lKpY3LE=
Subject key identifier: B0:CD:1A:F5:41:7A:87:5B:EB:3C:48:7B:2C:C8:C5:D0:60:A7:9C:34
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer: /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial: 019A541A850FD9E6CA1175449595CC040D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number: 0BB8
Signing time: Wed 05 Nov 2025 13:00:15 +0000
Manifest this update: Wed 05 Nov 2025 13:00:15 +0000
Manifest next update: Thu 06 Nov 2025 13:00:15 +0000
Files and hashes: 1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: 9KRB7hk7qAYrc+VeTvkOsSX6Ftpfi1nuWjH0UUoBLKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:85:0f:d9:e6:ca:11:75:44:95:95:cc:04:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Validity
Not Before: Nov 5 13:00:15 2025 GMT
Not After : Nov 6 13:00:15 2025 GMT
Subject: CN=b0cd1af5417a875beb3c487b2cc8c5d060a79c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:e6:24:03:07:68:0b:b2:2e:7f:3a:36:f4:
d4:6f:d7:23:97:2d:21:1c:56:3e:a1:cc:c4:28:14:
c7:6c:40:69:96:53:ee:1a:18:a0:3e:3d:05:98:96:
0e:05:b1:53:e6:15:b0:ec:36:15:5d:2e:7b:70:d4:
ec:20:08:e0:7e:59:42:14:58:29:f9:3d:4d:ab:3f:
f3:b1:65:0a:16:76:ec:2d:07:2c:98:f3:74:50:7b:
fa:b9:da:b0:51:2e:2a:3d:8e:50:68:57:fb:aa:73:
d3:0b:f4:06:f0:2e:11:6a:fd:26:27:56:cc:3c:56:
15:a8:d8:4e:25:8c:d4:ea:8d:62:39:89:16:6c:20:
a1:65:f1:59:4f:01:ea:8e:12:ef:e7:3f:e0:e4:b4:
df:c8:5d:44:15:dc:46:0c:78:3b:c5:78:e0:58:99:
ae:35:19:65:86:87:06:08:c5:9e:6a:0c:37:b4:04:
47:0f:66:5a:1b:8b:c3:b8:4b:18:77:57:6a:4e:f1:
ce:23:b8:6e:d0:12:f9:13:91:da:89:b9:11:49:ee:
74:50:b4:a3:b7:fb:82:73:79:f0:87:fa:9a:7d:f2:
54:5c:6d:0a:b6:6c:49:7f:c3:3d:bb:39:c8:c6:99:
a4:79:6b:99:b0:df:c0:c0:41:d0:f7:13:37:55:8e:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CD:1A:F5:41:7A:87:5B:EB:3C:48:7B:2C:C8:C5:D0:60:A7:9C:34
X509v3 Authority Key Identifier:
keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a8:29:ce:5d:68:66:62:a6:c2:67:b8:99:40:65:3c:bc:19:
cb:0b:ff:d3:58:be:34:5d:8b:08:e3:19:20:ae:01:80:05:de:
4a:d4:19:7f:9b:13:5f:55:b9:e2:13:0b:ed:eb:ba:8a:7b:34:
8f:73:fc:83:14:f5:52:1c:5d:a6:19:a8:67:23:30:a2:77:bc:
0e:74:0d:7e:af:2d:fb:2b:0e:ba:fa:56:ab:c7:b4:9a:0d:1b:
a7:15:2e:af:f9:6a:61:94:b7:82:2a:00:15:3c:46:da:e4:56:
ed:56:a8:5f:0b:6f:49:01:96:41:ad:73:78:94:b4:c4:3f:a6:
af:20:b8:25:d2:d3:af:81:65:d1:22:ce:49:dd:98:09:95:36:
8f:7b:bc:b4:c6:2c:53:60:50:c0:6b:bd:cd:d5:0e:20:2d:6f:
fd:bf:99:9d:d0:75:ee:b8:ee:14:e6:9b:8f:85:a8:b0:03:27:
4b:31:7c:c6:1b:c5:a6:10:13:57:f7:1d:8f:89:a3:07:2d:32:
da:27:a6:94:0f:f6:4b:11:da:31:c1:90:30:81:0a:ce:1d:7f:
e4:a5:a2:d0:0a:ae:44:e5:d2:c3:d2:47:08:c2:17:2e:89:f4:
45:c3:c6:9a:d0:16:56:a4:75:fb:0f:17:31:0b:f0:04:f7:8a:
0b:91:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:53 2025 by rpki-client