Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: T9BEVfXXkTmFt2DamHqtz4FfzInDwtTwc76B3gVJo4Q=
Subject key identifier: 56:FA:20:F4:2E:8C:02:37:27:2D:63:C4:DD:1E:71:08:BB:32:7D:BA
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019A4F62703F43A12EEF848C7E1BE37CC5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 11DD
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=)
2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: Vph9aTdPzhOGNEhiUpjWzWjtbeVF44J/jXwQhrusmxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:70:3f:43:a1:2e:ef:84:8c:7e:1b:e3:7c:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=56fa20f42e8c0237272d63c4dd1e7108bb327dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:a7:01:8d:79:81:ef:8d:f2:b3:97:23:0d:
0d:fe:7f:6a:9b:16:fd:dd:26:32:f0:6f:9b:2f:6e:
70:b3:d0:b4:da:2c:e7:9f:5e:da:74:9c:5a:5d:97:
0d:1a:ee:37:cf:99:f1:af:66:28:70:10:94:fc:35:
8a:7b:65:71:84:88:82:6f:19:6b:15:d2:33:9a:f1:
89:e5:4b:a7:52:fe:a8:e4:64:25:58:1a:9c:95:b2:
b1:dc:c6:9c:a4:6a:f8:4a:e6:b7:94:7a:85:d9:92:
86:01:aa:7b:1a:c0:a9:72:a7:9c:e3:bd:b7:f8:0f:
05:36:da:4f:4a:89:2b:69:3e:6a:be:7e:e7:c7:12:
9a:47:26:8c:d1:c5:f1:ad:6c:14:7b:12:17:5e:f9:
b8:e8:e2:10:00:d6:7d:83:13:50:74:c1:97:d5:0d:
38:14:5e:2b:76:b7:9b:5e:eb:c8:c3:e3:74:c3:e1:
e0:e5:6f:3b:b1:f0:c9:74:10:87:9c:7c:8b:30:ce:
79:f1:62:83:a4:c6:4d:2d:c5:d0:40:e7:d6:74:af:
e9:17:ab:f6:6f:87:0f:9a:1c:49:74:dc:fd:83:3e:
a6:97:c1:45:9b:3d:5b:31:80:ec:81:f6:c9:0d:c3:
0a:ae:b6:6e:97:ae:ae:76:85:ed:5f:12:c2:87:ac:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:20:F4:2E:8C:02:37:27:2D:63:C4:DD:1E:71:08:BB:32:7D:BA
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:96:f5:a9:91:95:d5:be:53:13:a3:b0:ad:4d:40:e8:5e:3c:
a2:23:50:60:5b:97:b8:59:c7:30:9e:05:d8:47:21:f8:29:3c:
a6:d8:9a:4c:d0:39:b6:66:1c:72:f3:c1:09:4a:d3:1c:db:31:
5d:bc:3f:3e:08:19:6f:d7:35:eb:f4:5f:40:9c:3d:12:67:bb:
7e:35:78:da:11:d9:99:a4:f9:09:4b:21:46:71:8d:5c:03:64:
e0:3b:37:e1:f5:2b:f1:88:8e:22:97:b5:f1:dd:15:a9:67:90:
b8:45:e7:a8:38:6f:f6:a8:76:e6:70:f0:ef:10:69:aa:e5:ea:
60:39:c0:5e:5e:49:8f:4a:e8:08:f1:bb:7c:9b:81:ab:6e:de:
63:90:60:47:78:44:13:59:43:3e:90:8c:ab:52:83:0d:93:ed:
91:c5:8a:75:d7:cd:14:b0:ce:c3:f1:b4:35:ec:f7:a4:8d:3f:
ba:d9:3a:1f:37:0a:26:fd:54:fb:6e:ed:1d:c6:08:ec:bd:c1:
d2:26:44:15:54:cf:bf:40:da:6c:ce:a3:1a:0a:83:c0:b5:20:
89:3e:3f:aa:17:49:89:97:ee:02:59:60:29:4f:e8:99:61:f7:
be:21:5c:12:a5:c7:26:bc:e0:48:c1:2a:18:10:a5:5a:0a:2d:
c3:c2:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:01 2025 by rpki-client