Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: 5sK6eAh8Q8eTJjstaYnNq53TxHxsWcYXDm4abgDxHsM=
Subject key identifier: C9:CF:C7:8D:BD:9E:B0:8C:3C:61:2D:EF:2C:8B:F7:DA:03:88:D7:CE
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019A4E4FFFBEAB247D2DF624000953607A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 0439
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: gwf6PCSjDXdfnXNhtw0UyXaHxUU3OZBWEMktU1WNaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ff:be:ab:24:7d:2d:f6:24:00:09:53:60:7a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=c9cfc78dbd9eb08c3c612def2c8bf7da0388d7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:63:af:7d:f2:56:84:be:6c:41:89:3a:54:
c0:41:b0:1b:c2:27:46:5b:05:71:97:ef:dd:ef:b6:
f2:4c:ea:14:0f:70:4d:68:b4:d6:ed:a9:dd:75:ee:
4c:49:a0:0f:3e:b3:e1:61:c9:b7:3b:38:92:f0:54:
0a:ef:14:83:ab:24:7e:df:c3:98:fb:a8:54:c8:68:
c8:c2:bb:7d:d1:c9:a8:5a:64:69:58:94:35:4c:9f:
74:0b:bb:dd:92:38:b4:1a:39:a3:2f:d7:ea:ce:1a:
f8:57:65:2b:4d:cd:60:66:ac:33:05:d1:91:69:5b:
c5:d5:7d:d0:e5:df:72:5f:e9:d2:78:22:8a:a0:c6:
1a:5f:b9:d3:24:29:ba:64:b0:01:e7:bb:ab:98:af:
a5:32:e3:02:d8:c0:96:ca:37:51:81:87:65:3d:87:
a7:30:5d:86:d9:2d:ce:e7:be:43:12:6c:7e:af:df:
27:7d:c5:58:db:5a:29:df:a4:25:05:bb:0a:25:7a:
c4:1f:3b:9b:59:e1:1e:34:49:de:04:17:50:6c:05:
66:d5:5b:22:21:b7:43:cc:f7:9c:ba:b3:82:06:2f:
31:2f:f9:e5:84:b0:b1:0b:9e:31:f6:f4:27:29:b9:
2b:40:c5:c5:ee:82:5d:1d:c7:84:94:bc:57:79:1c:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:C7:8D:BD:9E:B0:8C:3C:61:2D:EF:2C:8B:F7:DA:03:88:D7:CE
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0b:f9:ba:92:03:91:fc:8c:c8:d8:07:e9:5c:7d:11:a7:b5:
bb:a1:07:92:10:97:1e:2e:56:ff:ae:9b:e3:97:4b:2c:3f:79:
fe:a1:5c:4d:2f:42:71:46:e8:46:d0:12:b3:6f:cb:4e:f1:ea:
e4:11:c7:5e:a5:38:f7:d3:c3:6c:14:bd:28:7a:13:72:7a:72:
35:b8:19:d5:96:d2:ff:87:0c:05:c3:70:50:ac:ea:b9:27:f2:
2c:1c:b4:2f:46:f0:e0:bc:16:3c:31:60:21:bb:61:64:cf:a0:
aa:11:65:a1:00:58:0b:47:b9:a2:ae:5c:74:41:84:a2:b1:f4:
03:b8:f1:a0:a9:cf:48:4c:4b:69:c2:f2:4e:ea:b7:77:00:de:
d0:f3:80:a4:87:f3:d3:46:55:9b:c6:7d:81:82:60:26:72:fa:
86:43:58:94:97:3a:88:04:24:1c:fd:61:76:75:ef:39:ff:3e:
ab:36:fb:0e:e1:71:a8:28:b9:69:08:4f:c7:5f:53:01:22:5c:
d4:bf:02:3a:40:88:31:52:e2:c3:04:4a:e6:0a:86:cb:c9:98:
8b:fa:1b:ae:89:2c:32:63:43:09:3f:ce:ea:e5:ec:65:20:e4:
50:d7:2c:a5:cb:6c:36:f6:ef:7b:e6:3f:c9:fd:ee:5e:22:15:
dc:8f:14:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:23 2025 by rpki-client