Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: osvZndbgschKoLJ2BI52mS2AiyofhOfH2s7pNUlRSXI=
Subject key identifier: D9:6D:B2:EE:A6:14:90:2B:21:78:BE:2F:68:D1:63:4A:29:33:C7:0C
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 019A4EF40FDA56A769284CC0A88A04F9E513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0CF1
Signing time: Tue 04 Nov 2025 13:00:08 +0000
Manifest this update: Tue 04 Nov 2025 13:00:08 +0000
Manifest next update: Wed 05 Nov 2025 13:00:08 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: PQpM/w0jOFIEF2vim/AtjnDuEU3ODSjyJ/I850i6Rq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0f:da:56:a7:69:28:4c:c0:a8:8a:04:f9:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Nov 4 13:00:08 2025 GMT
Not After : Nov 5 13:00:08 2025 GMT
Subject: CN=d96db2eea614902b2178be2f68d1634a2933c70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:e9:64:6e:5e:e4:69:42:08:5c:78:67:b6:
3a:9b:5c:cd:d6:b4:f5:b5:33:27:07:65:d7:16:19:
c3:82:2f:14:51:eb:8c:b3:47:f8:65:b7:29:93:0b:
b8:b3:e4:9e:77:7c:1e:12:8f:77:2d:b9:4a:21:2c:
44:53:89:b2:74:aa:88:74:62:61:7c:24:fd:07:d9:
8d:8f:21:c1:c4:69:9e:c5:29:9c:10:8e:88:ab:26:
44:9c:20:56:ac:7d:6d:55:f8:e7:18:9c:4f:8f:14:
16:b7:72:bb:cd:81:1d:7a:b2:41:14:0a:db:29:ab:
d3:44:83:f6:75:f5:f7:31:53:36:04:a8:98:e5:79:
2a:17:83:81:7f:9b:d9:1a:f9:98:18:61:76:dc:12:
63:10:4c:87:4a:e3:b7:1a:81:78:c4:31:13:85:31:
fd:39:74:2e:d1:cc:8f:28:37:aa:29:f6:20:29:d8:
ad:b4:ab:54:ae:c0:e1:66:09:2e:54:02:fa:7b:22:
a4:77:ca:4a:82:d9:e6:8d:e9:26:b2:97:47:4f:3b:
31:d5:a1:16:cb:99:c4:af:1b:41:fe:5d:8c:57:77:
c7:7b:6c:82:e4:34:1a:d1:ac:76:be:29:8c:5f:08:
61:7c:49:56:0c:4a:b2:22:82:33:39:44:7c:f7:27:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:B2:EE:A6:14:90:2B:21:78:BE:2F:68:D1:63:4A:29:33:C7:0C
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:20:ca:fa:af:19:68:4c:fd:6a:df:2b:17:c2:72:7e:dc:
f2:3b:f9:d3:00:c9:4f:f5:bf:a6:6f:0a:42:6e:3c:40:4c:5d:
d3:af:45:ac:15:77:d2:c6:33:97:8e:10:bf:7a:f7:f0:f1:33:
56:72:da:81:03:6a:cb:dd:e5:2e:ba:e3:62:48:75:eb:97:0a:
76:8c:db:75:44:c1:0a:c9:dc:9e:6f:82:78:9e:ad:6a:41:ff:
ba:dd:22:d6:d9:80:dc:e7:f7:cd:3d:3f:50:bb:3c:53:1f:92:
9e:45:f3:41:45:0a:a3:24:7a:75:e2:eb:ff:ef:42:f0:ad:38:
b1:87:4e:6e:21:32:05:64:da:47:d4:7c:a6:29:38:8f:b6:a8:
e7:df:03:52:58:68:8e:fb:82:f4:ac:6f:10:e5:c5:ae:b4:a7:
a4:ed:d6:6d:de:04:f6:d5:db:b4:45:5f:7e:d2:a8:fa:e9:89:
da:53:49:34:92:10:88:1e:a6:93:cf:d9:fa:b7:6d:c0:63:54:
7a:fc:2e:44:c3:0f:cf:23:d5:ed:4d:22:51:ba:20:b0:0b:6f:
a9:b0:d0:a4:ba:92:76:a1:80:88:0a:af:c0:b4:18:77:18:48:
bc:48:d2:cb:19:a3:fa:3a:8e:bd:87:ca:3d:9a:b2:70:fb:8d:
98:3e:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:49 2025 by rpki-client