Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: Tquf8PowSGLNRqd9gnQop8u8NuOpWSazul3fOKcd8o8=
Subject key identifier: C6:E8:97:61:C2:C4:DA:29:8A:15:22:6B:3E:45:B9:75:57:84:3F:29
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019A4C61779E8F197EC6B33B5F3EB962AC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1332
Signing time: Tue 04 Nov 2025 01:00:47 +0000
Manifest this update: Tue 04 Nov 2025 01:00:47 +0000
Manifest next update: Wed 05 Nov 2025 01:00:47 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: sM9VR3WNkUrjsHlggy6UA2ZCJ7NJcnEUya//pv4hmOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:77:9e:8f:19:7e:c6:b3:3b:5f:3e:b9:62:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Nov 4 01:00:47 2025 GMT
Not After : Nov 5 01:00:47 2025 GMT
Subject: CN=c6e89761c2c4da298a15226b3e45b97557843f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:54:1e:62:df:e9:c4:65:0d:26:c8:c1:42:
aa:38:9f:93:d2:cb:03:c7:15:6b:dc:56:06:3c:38:
a8:f7:1f:cc:3f:bb:a3:7c:fd:09:32:90:e5:92:2a:
a0:77:25:f8:c4:7a:c6:08:b8:19:eb:07:68:7f:76:
9c:2e:be:34:e4:a2:06:05:0c:f7:48:d6:8b:0a:b5:
87:f7:98:42:6e:5c:a5:81:6b:d4:e4:13:b8:d0:b0:
f4:9b:f1:c1:e4:82:9b:82:90:64:de:0a:f2:cc:f5:
33:35:fc:a5:ab:c5:79:8b:56:b8:15:94:ea:71:c6:
a3:2e:d7:78:97:8e:be:48:3b:8a:64:dc:93:26:2f:
76:6f:d6:c2:91:db:45:04:44:eb:ba:67:ef:3b:8d:
d2:85:89:f2:2a:53:7a:87:95:33:19:4f:28:52:be:
f7:16:ed:33:fd:0e:bf:1e:c7:15:90:29:03:ea:ef:
b6:b0:79:57:12:5e:e2:ae:7c:7e:77:43:92:6e:dd:
2b:52:d3:f3:6a:11:51:59:37:b7:f1:8d:8a:e6:30:
cf:63:23:eb:82:48:83:10:f2:c2:7c:d4:eb:be:68:
7d:13:72:0b:40:c0:2b:e3:39:e9:0c:61:f7:9f:75:
93:50:94:87:df:18:46:11:fd:85:46:88:9c:b4:3f:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:97:61:C2:C4:DA:29:8A:15:22:6B:3E:45:B9:75:57:84:3F:29
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c5:b4:f6:ec:31:2c:84:ad:cf:bb:a1:88:4f:60:40:3b:3e:
ab:15:c3:8a:49:fe:33:ba:9d:9a:27:38:20:ff:3f:e1:dd:74:
31:30:2e:a1:ee:fc:7e:02:a3:c2:33:c9:88:59:93:8a:df:e2:
87:21:e2:ff:37:4b:f0:3f:b4:6f:c0:62:63:ec:b6:b2:e5:ac:
94:11:72:60:6b:f0:1d:5b:68:fc:7c:b7:76:f3:61:0a:01:8d:
42:e5:3b:8b:ff:df:25:9b:53:86:3b:e4:03:5f:0a:2e:a5:06:
65:b0:1e:7f:9d:d3:35:45:72:3e:22:4d:8f:fa:64:55:c9:5c:
3f:d6:be:9c:86:fd:f7:3d:c2:bd:4c:f4:b8:88:4b:84:8b:84:
e7:e0:58:83:8f:de:0b:00:f4:bc:9c:b2:82:52:f0:ad:85:3d:
38:5e:17:ad:90:2f:91:10:ec:36:07:a2:32:1a:cf:4c:38:a0:
44:24:cd:17:08:a8:01:a1:25:c1:52:fd:8a:05:11:e5:c4:97:
02:61:45:af:02:65:fe:a0:a8:9f:b4:53:3a:6b:de:78:13:db:
72:fc:fc:89:d7:a1:43:db:d2:4a:f7:24:3b:82:c1:dd:dc:38:
55:d3:e9:ea:aa:ac:6e:b9:3b:e3:37:03:5c:0d:16:0b:71:4a:
7f:e5:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:07 2025 by rpki-client