Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: RT2gREgwerGKZX9aVXDqDbO9HZ0gYsXArauc4bUsSUs=
Subject key identifier: BC:60:82:47:AF:E8:E1:08:CE:77:67:1D:43:9D:1A:81:98:BB:FD:DF
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019A4E86C62DB2EFD944352892F98A75ED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 12BA
Signing time: Tue 04 Nov 2025 11:00:46 +0000
Manifest this update: Tue 04 Nov 2025 11:00:46 +0000
Manifest next update: Wed 05 Nov 2025 11:00:46 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: ON7bYtLDOHX+YJ69OqbPds5cESnHl95KRoSXjONsV48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c6:2d:b2:ef:d9:44:35:28:92:f9:8a:75:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Nov 4 11:00:46 2025 GMT
Not After : Nov 5 11:00:46 2025 GMT
Subject: CN=bc608247afe8e108ce77671d439d1a8198bbfddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:b7:9c:95:2f:88:a8:ca:62:d6:a4:27:d7:
56:90:28:f3:59:e4:d1:35:07:3b:0d:fb:77:68:b0:
07:36:07:0f:d8:79:49:01:92:b4:3b:5f:86:1d:66:
7e:9c:1a:e2:5e:4d:0e:63:7f:45:e9:6c:b8:7e:d0:
ef:6b:48:c7:e4:3d:5b:cf:eb:b2:4e:0a:de:69:90:
52:6b:fc:5e:87:91:4c:08:08:4e:2d:4d:10:46:06:
10:4a:6b:45:43:7a:ef:d6:c4:e2:14:1e:ec:80:8f:
01:de:11:7c:9c:a3:b3:e8:27:e8:ce:08:44:bf:cc:
1c:05:3d:a9:fc:b8:b2:3b:85:a9:61:7f:0a:9c:66:
0d:25:bb:d0:a5:c7:51:db:da:0b:26:fe:ee:d2:6d:
ea:60:f3:1b:9e:0d:90:8f:bb:aa:86:98:a7:24:e9:
3d:e8:81:75:cf:67:a2:0d:ef:d9:1e:2a:8c:56:b5:
bd:6f:25:45:63:5e:fa:24:96:24:c6:16:9b:40:27:
b5:bb:50:ea:f3:75:e2:ee:4d:47:3c:54:ce:e6:9a:
88:5b:eb:0d:e4:7d:cc:30:66:69:6e:cb:12:46:2c:
8c:bd:1d:be:b2:84:a6:6c:66:3a:17:fe:77:39:fd:
e0:3a:38:10:b6:7c:a6:ea:14:dd:1e:75:7c:8e:66:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:82:47:AF:E8:E1:08:CE:77:67:1D:43:9D:1A:81:98:BB:FD:DF
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:97:e0:70:63:bb:ce:dc:5e:93:4b:d6:d3:76:06:03:a8:
9e:67:44:8e:e4:6a:8b:1e:4a:e5:ae:f0:11:5d:5a:7d:f4:4c:
6c:8e:6e:0d:b6:32:d5:79:e3:22:de:2c:b9:82:cc:2f:a4:d0:
cb:e6:fc:16:63:24:4c:68:fb:29:4a:38:81:85:10:f9:b6:dc:
9a:4f:64:bb:58:ee:f3:35:0a:9f:2b:e2:fd:d8:89:96:c6:e9:
6f:02:2d:8a:45:71:bf:0b:61:fd:9c:24:1b:ce:fb:00:eb:4d:
4a:13:fc:d8:53:50:41:97:56:e5:c1:57:bd:d2:5f:f4:0e:f1:
c3:7c:2a:da:b5:39:cb:90:10:99:24:72:e1:06:08:0f:62:4d:
36:2b:a3:42:6f:de:40:42:c3:e8:7f:a7:2e:30:9e:88:d1:57:
d3:20:70:59:44:ce:86:c1:3f:13:2f:db:8e:97:50:94:38:62:
fa:ab:14:a2:79:01:f2:9a:0e:17:d1:6f:48:e2:59:82:8f:b8:
ea:3e:8a:69:20:80:bd:aa:41:bd:c7:53:a8:c9:86:01:e0:3f:
b4:57:d2:21:e4:45:18:61:a8:62:ba:ce:14:dd:1c:01:da:66:
99:51:03:bf:2a:2f:66:f3:9c:71:e4:78:19:c3:2e:65:6f:af:
2d:1c:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:33 2025 by rpki-client