Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: uO3Q+uppjjLheksJMRHa17i8V2JLK4xkA64JC49I4is=
Subject key identifier: DA:80:36:B6:65:0B:75:70:68:23:96:9D:A9:93:3E:93:AD:63:8E:23
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019A4F2B3E9FC5226D18DF8BF1F22553AEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 0680
Signing time: Tue 04 Nov 2025 14:00:25 +0000
Manifest this update: Tue 04 Nov 2025 14:00:25 +0000
Manifest next update: Wed 05 Nov 2025 14:00:25 +0000
Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: bEUkzZzsg8wqNVT8WgzcgUQLh24sltU1rAEaNkqO3MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3e:9f:c5:22:6d:18:df:8b:f1:f2:25:53:ae:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Nov 4 14:00:25 2025 GMT
Not After : Nov 5 14:00:25 2025 GMT
Subject: CN=da8036b6650b75706823969da9933e93ad638e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:dc:9f:d3:75:39:90:6a:a8:a5:f1:0f:fe:
a3:d1:88:a2:a0:6a:dc:e2:11:42:b5:3b:a0:10:ff:
f8:9e:0c:f9:e2:9c:2a:89:fd:c6:9e:3a:1f:1c:04:
44:1b:92:2b:dd:24:12:df:b4:26:4d:11:fa:60:39:
1e:8b:3e:85:e2:34:67:cd:b3:c0:9a:35:e2:58:24:
61:5c:1d:a3:24:67:09:d2:a4:b0:29:63:b3:ff:e3:
39:0d:31:e0:56:7d:86:5b:d7:36:36:bb:98:77:ff:
65:fa:84:96:20:8f:69:45:5b:b8:12:9e:a6:bf:9b:
c8:26:ba:eb:33:ed:dc:35:33:2a:ab:89:e6:40:5e:
ab:67:3a:e6:67:a6:22:8d:c7:6f:e1:34:0a:85:ff:
6c:a4:49:c5:27:7a:83:53:db:72:89:fb:d3:a0:ab:
3e:fa:72:1d:9a:a9:89:86:87:d6:33:70:db:0c:6c:
10:de:59:a3:83:39:44:e5:e7:a3:1a:71:68:6a:81:
99:44:07:0a:d3:43:3a:d3:7e:d2:1f:8d:1c:4a:4c:
01:fa:17:8b:63:c2:ae:ce:b8:f8:62:ac:ff:81:5a:
1e:97:72:62:86:b5:1c:25:b6:23:8f:d1:b1:db:1f:
09:f9:f3:2f:9e:72:c5:32:d6:45:f0:d1:c7:7c:cb:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:80:36:B6:65:0B:75:70:68:23:96:9D:A9:93:3E:93:AD:63:8E:23
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fb:15:69:c6:96:e7:64:e2:16:58:a5:e5:38:f7:c7:1a:d9:
02:e3:41:cd:47:f0:db:b4:ea:bb:32:90:53:51:be:57:1e:fb:
3e:51:af:cb:18:2d:c2:d7:ac:03:58:56:26:3c:e0:63:56:f9:
27:7e:a9:59:96:cb:0b:69:5b:7e:39:c3:91:91:76:21:33:40:
bc:81:f4:05:63:d7:f6:6c:08:60:b5:fe:52:d2:9a:71:f8:d9:
c1:38:8b:e3:2d:b4:50:f8:ad:ce:00:9d:a3:3a:64:e4:94:58:
de:dc:e2:65:d4:07:80:ad:f4:61:b0:09:13:cf:8b:24:f2:0b:
19:e9:09:81:39:40:33:33:65:97:78:c9:8a:41:f9:4c:67:d6:
c0:6b:d2:d8:a1:98:c0:e8:8a:97:ab:0b:9c:f3:45:00:cc:30:
a8:da:30:a2:c3:45:79:bd:1c:8c:a9:9e:1c:a1:1c:2d:1d:60:
e5:8b:06:4a:31:5e:9c:2d:7a:6c:64:d2:b8:d3:42:37:83:9f:
84:04:87:c5:fc:9e:a7:67:b3:20:b0:8e:ca:14:59:8e:2a:be:
81:0f:6e:13:f7:5f:b6:43:ec:f5:b8:9f:3d:e5:d4:ad:40:1a:
61:80:57:ee:ad:25:dc:9e:5a:49:bd:93:75:e9:51:7a:ad:f9:
4f:d7:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:13 2025 by rpki-client