Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File: jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier: dEbTWuEnsfBYxK10SrH/yqj7f/3WGzva86tZeNCOBqU=
Subject key identifier: 4E:AE:C5:D8:B0:E6:C1:C2:95:D1:AD:B1:7F:91:B1:A4:BD:A9:C8:B6
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 019A53AD0DFCF2B8F04B4D8A8713020976DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number: 0DDE
Signing time: Wed 05 Nov 2025 11:00:41 +0000
Manifest this update: Wed 05 Nov 2025 11:00:41 +0000
Manifest next update: Thu 06 Nov 2025 11:00:41 +0000
Files and hashes: 1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: p3eEsiiuHZYXSuqXLQSMD7BW5Ac2VBonrmxPqOuJuwM=)
4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:0d:fc:f2:b8:f0:4b:4d:8a:87:13:02:09:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Nov 5 11:00:41 2025 GMT
Not After : Nov 6 11:00:41 2025 GMT
Subject: CN=4eaec5d8b0e6c1c295d1adb17f91b1a4bda9c8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:4a:75:b1:eb:e7:d5:3f:83:d7:d6:a3:71:
64:f9:b6:66:f1:51:52:26:69:f5:c8:16:a3:cd:99:
8b:c0:7d:d6:b8:2d:87:68:61:fe:21:cc:e7:e9:e6:
49:77:ed:fe:d9:c2:48:c1:25:4b:1e:52:7e:97:9d:
63:96:56:93:dc:52:43:66:04:df:b3:73:53:0e:91:
72:9f:c5:2c:d4:9d:d6:a5:b9:b0:3a:3d:08:82:0d:
b0:b5:3e:e3:05:69:34:8f:4a:c9:72:e8:3f:bd:f0:
2f:12:7d:7e:28:e4:60:f5:06:89:79:ae:53:4b:bb:
8c:63:db:fc:f2:67:b3:3c:9d:5d:a7:62:ed:a0:5e:
37:60:c7:f1:27:64:88:66:7e:35:ef:9f:54:c1:5e:
ae:a9:24:d3:cb:24:40:93:f2:31:11:87:30:4c:19:
0b:eb:ce:11:66:97:c3:ba:1b:c6:2e:73:e1:2a:67:
0a:04:d2:0e:ec:32:25:16:c9:4d:fd:9a:d8:90:fe:
42:75:f3:eb:b6:4d:51:57:94:8e:57:07:0c:39:19:
41:2d:5c:5e:bb:7a:b4:38:30:b5:34:dd:88:76:ab:
c7:39:9d:ed:b4:e8:6a:b9:07:9f:a0:48:a6:90:80:
54:cf:bd:7d:a4:c3:5a:5a:d0:bc:9b:b9:2b:98:16:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:C5:D8:B0:E6:C1:C2:95:D1:AD:B1:7F:91:B1:A4:BD:A9:C8:B6
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:a7:87:a4:11:5c:82:d9:fe:ee:29:e8:dc:f3:f7:16:77:
95:02:78:9c:97:b4:59:d7:08:24:55:a0:34:90:73:c4:dd:7a:
49:71:a4:05:50:f2:e1:51:42:91:b9:7a:f7:53:39:5b:c0:be:
0a:da:b8:83:c1:98:08:0e:a5:95:93:f5:ed:52:07:af:f0:90:
4f:9d:ac:4e:f3:31:6b:b9:95:e5:e6:89:2d:ac:c8:f7:88:1f:
32:81:39:45:61:f1:0d:50:d3:22:fe:41:9f:45:d3:a4:36:6a:
f8:8d:2f:83:27:93:1a:34:94:eb:62:64:53:f4:9a:34:1f:98:
46:c9:8a:93:8d:b9:8d:26:4e:b7:4d:99:4a:37:44:20:da:a1:
bc:e7:43:bd:f2:59:7e:e4:82:83:79:e2:39:32:50:17:e7:48:
bb:83:bc:b6:d6:be:fa:2f:82:e8:0a:96:29:c7:b4:4e:2f:de:
c2:7e:98:fd:5d:77:09:55:ae:ac:e2:8c:84:35:6d:61:cf:ae:
a7:88:c2:55:5b:5e:01:a4:eb:f7:c7:78:bb:cc:5c:67:2d:b8:
66:e3:00:7c:3a:15:bd:e9:4e:dc:d3:8d:c3:af:79:10:6c:23:
66:a8:3e:53:1f:76:be:32:e0:32:9f:bb:dc:2b:6c:27:3b:4f:
15:7c:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:30 2025 by rpki-client