Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: glD3Jp089Nc+6LjNFBpzH/LLbMpKH3V9T6hqDun93zo=
Subject key identifier: 2B:CB:FD:82:D9:81:6A:74:F0:C3:8B:2D:2B:D7:54:7A:24:E2:B5:FB
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019A54C0C2A0C549F87E56BBA6A25BBB416B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0491
Signing time: Wed 05 Nov 2025 16:01:49 +0000
Manifest this update: Wed 05 Nov 2025 16:01:49 +0000
Manifest next update: Thu 06 Nov 2025 16:01:49 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: rNN5QK9wgo6PEOojdGpiRWNgJec1KaA9V3pMlTN0gCE=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:c2:a0:c5:49:f8:7e:56:bb:a6:a2:5b:bb:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Nov 5 16:01:49 2025 GMT
Not After : Nov 6 16:01:49 2025 GMT
Subject: CN=2bcbfd82d9816a74f0c38b2d2bd7547a24e2b5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:53:31:5d:0d:df:1d:b0:b9:d1:6f:75:97:
a0:f7:4e:4e:b3:b4:9c:01:60:d3:cc:ab:9c:84:29:
46:6c:25:72:6c:d6:ec:60:57:af:fc:c7:84:d4:1a:
35:a6:8c:54:95:65:71:63:58:aa:77:19:f3:81:b1:
f0:2b:60:d8:1b:70:72:e7:a6:17:04:77:70:18:19:
7d:10:bb:ca:e3:a1:5e:fd:22:11:72:0e:a0:02:fd:
ba:56:02:35:e1:48:4d:a6:cf:83:06:08:69:5c:bf:
fc:4b:c3:ad:82:df:98:23:58:fe:a6:1f:6d:49:98:
32:89:81:5b:86:ab:45:7b:15:ff:ec:ac:50:c2:bc:
3e:43:db:9b:7e:d0:7e:98:b2:0a:79:0a:87:67:13:
9a:fc:f1:60:0c:70:1c:a9:ef:3a:e2:72:f4:0e:da:
49:19:1d:69:6f:ea:b2:6f:34:d2:d0:bb:67:fd:9a:
55:83:54:e6:38:c1:f7:bc:cf:a6:d3:9b:19:95:15:
87:24:52:0d:fd:66:ed:47:d9:14:0d:92:e3:24:b0:
62:9c:05:1b:e8:dd:6e:ae:e1:81:fc:6d:bb:fd:fa:
9f:b0:63:a3:be:f1:46:f2:8c:fa:66:c1:bd:7d:e6:
ad:6a:f5:2a:ca:73:8b:33:8c:56:8f:ae:cc:fe:7a:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:FD:82:D9:81:6A:74:F0:C3:8B:2D:2B:D7:54:7A:24:E2:B5:FB
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:53:2d:ef:e0:2b:6f:44:44:d1:f8:7f:98:48:ae:27:1d:
97:17:ca:da:8c:66:7f:d9:98:a9:b1:1a:45:1e:3a:4b:26:88:
6d:64:96:65:80:d7:58:b5:7b:df:3e:fa:1e:4c:ca:76:34:4e:
77:ae:9e:fd:12:2a:d2:07:3d:70:76:fa:d2:1a:da:71:b5:ff:
d6:ad:34:89:d6:ae:f1:ec:45:90:de:a5:2a:a1:b8:98:09:97:
6e:7c:61:41:5b:5b:a6:70:96:ab:bf:b1:ab:14:3a:a2:f6:2a:
f7:c2:8a:0e:a7:df:31:f8:85:6d:ea:80:1e:67:59:46:58:6d:
cf:ed:70:5b:77:2b:33:9d:43:2d:72:78:98:26:f4:65:ca:95:
8e:f8:10:33:71:05:70:cb:9c:eb:1f:c2:73:9e:d8:69:f2:7d:
84:ad:3f:65:31:ad:55:8b:1b:c5:7e:34:9d:f6:9d:57:f0:d8:
5a:ed:dc:be:a6:8e:66:aa:57:ed:92:f3:c4:4c:b8:f7:68:50:
2c:8c:85:29:81:25:dd:fe:0b:b1:2b:d8:3b:2f:3b:4f:d1:21:
bc:91:e3:70:a3:04:5b:82:2c:be:ca:44:89:41:16:52:25:8e:
1e:c7:81:f6:1f:09:97:54:8b:34:b8:4e:2f:05:04:d2:3f:cb:
fb:92:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:07 2025 by rpki-client