Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: uNAyrCjtRpUoMLPYKP3V8Wv9HSebSO629dsC3Xe5TAE=
Subject key identifier: 1B:3D:74:9C:B8:D8:CF:82:45:64:2D:5B:B0:B6:6B:18:02:41:24:9E
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 019A4C984904887F287218068FE80FD5DFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 0995
Signing time: Tue 04 Nov 2025 02:00:39 +0000
Manifest this update: Tue 04 Nov 2025 02:00:39 +0000
Manifest next update: Wed 05 Nov 2025 02:00:39 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: rKqW2coPZ4dvgHE6CvGvAhXVu7c8NkbqzOMnAbzN76c=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:49:04:88:7f:28:72:18:06:8f:e8:0f:d5:df:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Nov 4 02:00:39 2025 GMT
Not After : Nov 5 02:00:39 2025 GMT
Subject: CN=1b3d749cb8d8cf8245642d5bb0b66b180241249e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:6e:ed:1b:5f:a7:fd:b2:c7:f1:c3:9b:79:
19:0b:39:e4:ec:8a:25:f1:cc:ab:32:33:01:d8:94:
b0:97:06:d3:63:50:fa:53:a1:ef:26:1e:0b:22:c8:
0e:36:da:0c:58:0c:59:c6:4a:0e:8d:a4:13:15:5b:
08:fc:63:92:7c:43:ca:6d:1c:70:df:97:53:74:ae:
03:e3:04:74:62:bf:f6:b6:43:4f:80:6b:77:0b:25:
fd:fa:7d:a6:f8:b8:06:7a:a3:42:9a:2a:d7:c9:33:
24:be:e1:6a:eb:38:9a:51:3f:b0:27:2d:d2:36:cf:
b9:ca:db:e4:88:24:9f:dc:ca:26:1e:5c:8c:92:79:
02:fb:09:b8:6a:27:bb:d4:3e:e1:34:f1:3f:20:17:
6e:12:db:d6:e4:ef:32:98:9b:43:84:15:56:c9:9b:
9c:a5:ea:8a:f4:d2:c6:23:0e:20:48:1d:dc:ba:a2:
c8:fe:ed:74:eb:4e:4e:d3:fd:1f:7e:f2:b2:12:2b:
41:64:1f:60:e0:fe:a4:b7:8b:5a:2e:ad:1f:17:38:
ce:b6:92:51:36:47:d6:fb:c0:cb:2a:1e:c4:80:e6:
21:28:b0:a9:ed:73:79:30:1e:da:11:5d:0f:e9:e9:
35:12:44:8e:3a:73:52:54:b2:1b:5d:6a:90:3b:9e:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:74:9C:B8:D8:CF:82:45:64:2D:5B:B0:B6:6B:18:02:41:24:9E
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cd:7c:45:67:b5:69:2d:19:cb:04:b2:e3:db:21:a8:8d:42:
af:85:d2:7a:03:7d:0e:00:39:2c:da:c1:55:50:b3:bb:b9:5a:
7c:15:c6:78:ce:f4:34:8b:65:51:3a:02:b0:61:e4:f0:94:80:
55:bd:ed:d6:04:43:7f:61:f4:49:72:8a:1f:09:db:61:49:02:
b2:8c:bf:a2:0a:8f:93:95:5d:5e:a9:0f:a1:d4:f8:90:a7:1b:
4b:5b:ee:18:0c:fe:17:a7:0f:e2:73:7c:35:52:71:10:1a:10:
63:47:94:b3:30:bc:35:df:c8:90:62:2b:f8:cb:35:78:6e:67:
d4:82:35:ee:40:2d:a9:aa:cb:70:a2:59:2c:3c:da:a2:20:2b:
7d:79:eb:73:50:3f:a7:a2:61:ee:ee:5b:c2:44:a3:2c:a7:32:
46:9d:61:a1:cf:22:e4:89:4b:ae:f0:69:22:bf:94:c7:7a:c2:
08:47:4f:79:17:cd:ad:0e:0d:8d:0c:8a:25:26:71:cd:0a:98:
1b:a0:59:a2:d2:9b:5e:ee:70:c1:82:66:66:8b:2a:00:c8:92:
5f:7f:b6:07:5f:f6:53:80:a7:68:09:8a:fb:a2:f8:01:2c:46:
fb:02:fd:38:b5:5c:da:21:94:5c:49:25:6d:cd:a2:0f:56:43:
ea:33:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:36 2025 by rpki-client