Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: OCgwq+J2znc9BRWZg9OV84LD+RbyoROnuSd0RrdPZZ4=
Subject key identifier: 51:34:7A:0A:87:99:10:22:D3:2E:07:2C:61:A0:5D:B7:7C:A1:98:89
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019A4D74198F1301F3B1C898F947FBBEA91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 09CD
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: b8rwxwjUYdf4Do1gFD81r6OnJyPpkYAdQXQkpR+oUd8=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:19:8f:13:01:f3:b1:c8:98:f9:47:fb:be:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=51347a0a87991022d32e072c61a05db77ca19889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:7d:b8:e1:ae:bb:f2:9d:af:ec:f3:2a:9a:
2a:aa:ca:61:5b:2c:77:04:1c:9a:37:89:3a:81:ea:
60:d1:08:c9:e4:db:17:f0:01:a8:54:65:18:4a:ee:
f3:47:d5:54:6c:c8:45:db:b1:40:d4:f9:03:9c:62:
3b:e0:ef:a6:08:9a:98:75:d1:93:5e:32:1c:b4:87:
c6:3e:8a:e1:26:36:0a:78:a3:41:6e:78:b4:b1:ef:
05:fb:25:96:6b:82:a2:5c:b2:74:4a:86:c7:9d:63:
08:f9:77:da:14:b4:5d:18:6b:fb:8b:0d:1b:b6:d5:
56:93:c6:52:d9:10:ae:d3:8d:05:e1:34:82:d5:84:
82:a7:18:bc:95:5a:92:72:a9:03:a2:48:2b:41:01:
af:62:67:9a:0e:06:ad:eb:ca:64:94:3d:22:e8:1b:
64:f0:03:c5:73:56:7b:3f:11:e8:6c:98:62:d2:88:
d4:f7:00:dd:c9:cf:43:d4:07:a8:73:89:4c:3c:98:
ec:14:4c:7b:52:52:8d:d7:60:7e:1c:22:db:10:16:
bf:b2:a2:fe:c8:36:91:81:ee:2f:06:94:98:80:31:
61:c0:5e:c6:5f:93:5f:08:80:8e:64:41:3f:c1:31:
93:da:61:ca:4e:af:a0:a1:8d:8b:8a:3c:16:dc:fc:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:7A:0A:87:99:10:22:D3:2E:07:2C:61:A0:5D:B7:7C:A1:98:89
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:65:76:71:8f:f5:9a:a6:4b:a5:a8:5b:42:1e:87:5b:bf:1d:
20:fb:23:1b:19:2d:a3:c8:19:cc:9b:e9:43:df:a0:71:a4:1a:
7b:3c:e9:9e:63:35:2d:ec:eb:9c:bb:09:70:a0:44:ac:75:9e:
c7:45:60:dc:3c:5c:36:db:08:cf:d1:0e:cd:db:b7:a1:d7:8c:
0e:24:46:63:67:bf:c6:32:7c:04:00:5b:2c:f5:ab:23:dd:a9:
75:26:8c:a9:e6:6e:c1:46:c9:81:8e:cc:ff:80:7c:49:62:52:
95:e4:fa:f3:d2:74:14:4c:8d:57:28:b9:ed:fa:aa:4d:00:57:
87:cf:da:bb:a7:1f:60:d1:5e:42:57:4c:65:14:69:57:b4:c3:
45:3b:0b:2c:94:a0:32:93:74:fd:0e:24:58:be:7b:e2:40:c0:
82:d5:7b:b8:1c:07:ce:48:f7:07:49:da:f5:22:1d:9f:c7:11:
b7:ca:7c:6f:4e:81:cd:03:aa:85:32:13:ab:b7:1d:26:ee:28:
40:5f:b4:ca:1d:08:86:d0:3c:76:ab:43:00:91:a1:f4:ee:96:
f8:9e:6f:ae:eb:c1:28:c2:60:06:dd:aa:12:12:b9:99:b4:42:
ae:dd:2f:43:49:60:fc:2d:65:5b:ea:4f:76:af:19:1e:17:74:
36:c6:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:28 2025 by rpki-client