Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: vLwQeTc/d8qWGQ/vNaX/6zSf47UtxIX7S1qdJS6+cqo=
Subject key identifier: 9A:AC:AB:3C:1B:8C:E0:A1:16:30:BB:C5:46:55:7D:13:20:B7:27:55
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 019A518769F52C967350AA550922850BA802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 12B1
Signing time: Wed 05 Nov 2025 01:00:20 +0000
Manifest this update: Wed 05 Nov 2025 01:00:20 +0000
Manifest next update: Thu 06 Nov 2025 01:00:20 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: VSvUA6/KmPwaNNFaYsWdG9vdU5K0ztMW86CTQ4wVmFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:69:f5:2c:96:73:50:aa:55:09:22:85:0b:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Nov 5 01:00:20 2025 GMT
Not After : Nov 6 01:00:20 2025 GMT
Subject: CN=9aacab3c1b8ce0a11630bbc546557d1320b72755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:61:90:54:b0:12:1c:3e:d9:fe:cd:44:4d:
e1:2a:eb:6b:d3:23:f7:95:5a:ec:80:5a:40:21:11:
8f:9e:dc:61:e6:52:50:71:c8:95:b4:41:38:5a:63:
90:4e:5b:75:e2:c4:43:82:e7:6a:94:5d:8c:d3:f6:
31:46:3f:9a:42:25:e2:3f:9a:64:4a:95:f3:3f:26:
a2:6c:9c:33:06:50:25:b5:ed:60:cc:87:07:64:28:
14:fd:12:e9:01:ba:f6:ef:9c:2a:ca:69:0b:68:4b:
a3:57:f6:c5:2e:12:96:ee:4b:9e:0c:46:2e:e9:f0:
ab:4d:af:ed:97:fc:7c:e3:50:aa:b1:34:b8:26:84:
4a:1a:c0:a3:c2:a0:52:bf:6b:ba:be:b7:b8:3c:60:
24:b6:8e:8d:a2:dd:6b:50:38:6a:70:96:53:af:6a:
cf:1d:84:f0:5e:96:60:26:4f:d7:87:16:71:de:d7:
eb:c9:c6:7f:d6:4f:67:90:83:06:2f:4f:f7:54:af:
fb:7a:37:7b:70:de:53:fd:43:d7:89:c4:5d:a6:da:
e3:2e:6c:54:0a:92:9e:60:b6:4a:a5:c8:27:15:f8:
b1:f9:c2:2c:d0:09:6d:d8:75:29:0c:36:16:44:64:
77:25:9e:df:be:96:66:06:85:e7:97:8b:f0:24:0a:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:AB:3C:1B:8C:E0:A1:16:30:BB:C5:46:55:7D:13:20:B7:27:55
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:72:bb:66:d9:59:df:8f:19:f2:54:a8:d0:c4:6a:37:13:c8:
ed:9c:cd:0d:9d:f8:e1:f7:47:95:ea:37:89:0d:1e:33:15:a6:
f3:5a:4f:a6:ec:90:0b:b4:97:71:0c:94:20:99:60:e1:5d:d8:
6f:2e:a3:84:f5:a8:30:09:55:f8:86:bb:9b:9e:e1:11:26:18:
66:bb:28:d3:91:bb:47:c1:3a:cd:a0:78:24:1a:ef:d3:c3:ba:
a2:57:64:5d:1e:db:b6:2a:9c:4b:10:86:61:16:83:64:58:2f:
83:f4:da:d3:85:f3:ef:e6:de:57:2a:82:97:14:f5:8f:f4:58:
9d:ad:1b:3a:3b:c2:0b:89:69:09:92:31:1d:ce:8a:b4:09:1f:
cd:fe:de:44:4c:e6:c7:7a:44:44:16:db:68:97:f8:98:72:c8:
9f:96:ca:de:39:45:f6:89:66:e6:24:c7:da:7e:d7:12:1b:95:
3b:ad:dc:dc:7a:3d:77:dd:5b:24:07:e2:48:ed:82:b5:ad:43:
41:0c:8a:51:c3:9a:62:33:af:9e:36:49:42:ec:4a:bc:e7:d4:
3e:ba:ac:d2:65:2f:27:10:f3:c9:6d:da:c8:6e:53:51:74:05:
82:30:a7:0e:a3:cb:76:65:6a:35:80:ba:5d:46:71:aa:96:8f:
79:52:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:39 2025 by rpki-client