Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File: jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier: i7FiSqCnFO6atujWqMdhWVJEU/wq2hq+3cqybYXFOws=
Subject key identifier: 5C:57:B2:70:9F:92:C8:35:11:3D:B7:B5:17:0C:1C:17:11:92:E9:A4
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial: 019A51503F9E4B541F0EA871B22119EAD0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number: 0467
Signing time: Wed 05 Nov 2025 00:00:04 +0000
Manifest this update: Wed 05 Nov 2025 00:00:04 +0000
Manifest next update: Thu 06 Nov 2025 00:00:04 +0000
Files and hashes: 1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: sNhemCcumLd6TY3BPNWAS2NJjAU0hUoUe0UU8MyhzpA=)
2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:3f:9e:4b:54:1f:0e:a8:71:b2:21:19:ea:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Validity
Not Before: Nov 5 00:00:04 2025 GMT
Not After : Nov 6 00:00:04 2025 GMT
Subject: CN=5c57b2709f92c835113db7b5170c1c171192e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:fe:6f:28:4f:01:a6:e0:c7:60:ed:7a:e7:
69:03:cf:0f:0b:06:54:f2:db:81:f0:3b:3d:80:7a:
e8:8f:4d:e9:1a:27:04:91:44:c2:12:88:42:ea:87:
42:92:ef:4b:8a:87:75:f3:c6:1a:3e:e2:fe:1b:43:
98:d2:be:a0:45:55:c7:e1:1b:80:b6:19:26:e5:18:
3f:ce:cd:7b:6b:28:3a:fa:d9:15:de:6d:90:9b:54:
48:85:3a:82:ad:55:f5:87:05:16:b4:8b:5a:fb:20:
f4:d8:41:e1:1e:d6:c0:59:77:3d:57:b2:0a:37:23:
79:cb:f5:b6:40:8c:23:31:69:8c:83:56:3b:6a:a5:
94:ff:b9:7f:70:f2:2b:d9:d2:68:59:43:a4:ad:69:
6f:c9:f4:90:c6:d0:ae:b9:9c:a2:6a:8a:f6:ef:28:
f9:41:c5:59:a4:80:00:3a:1e:77:1b:78:56:61:e2:
85:55:b6:08:6a:fa:57:27:c9:89:b0:17:08:f7:3c:
40:4f:56:f2:e0:5c:10:1b:a0:38:21:ed:6b:4e:8e:
85:f2:34:22:f4:ea:55:fd:a4:1b:1f:7c:fb:ab:7e:
28:46:6b:2a:5b:13:9e:57:75:87:8e:70:40:cf:57:
87:00:c4:86:8f:40:af:22:a4:47:fd:0d:87:16:be:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:B2:70:9F:92:C8:35:11:3D:B7:B5:17:0C:1C:17:11:92:E9:A4
X509v3 Authority Key Identifier:
keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ae:ed:3d:25:1f:51:23:27:48:53:94:13:aa:e4:92:09:18:
a4:11:94:ad:1f:a7:1b:2b:1b:c2:4f:f9:80:3e:60:c1:8f:87:
d7:ce:d3:27:76:40:c2:ea:e8:1d:1a:6b:fa:8d:fa:59:0d:59:
02:c1:f5:e9:fe:d1:22:18:7f:66:c6:da:1c:13:63:d6:ca:5d:
f5:19:7d:af:57:42:64:32:70:a9:16:2e:dd:0f:82:77:a5:a3:
f3:6c:3a:12:48:1c:a6:64:d6:4f:e2:b1:9d:8c:85:af:78:b2:
96:96:63:a3:34:b5:cc:a9:6a:99:f8:f0:ae:17:0e:04:ae:7e:
86:6d:bc:35:12:94:dc:50:01:98:48:9a:8c:b0:27:76:4d:fe:
6c:b3:35:8f:d3:67:9a:ec:f7:83:62:c1:d5:5b:7c:2f:a3:a0:
ae:ce:15:95:3d:2c:5c:bf:94:82:c3:15:42:c0:dd:75:70:bf:
df:ff:cc:2f:17:4d:92:0b:1b:e6:51:b2:8a:7a:0f:d1:91:01:
de:91:23:f1:4d:3b:78:4f:24:7c:54:1d:73:0a:a4:c8:a6:fc:
20:1f:da:47:d6:03:ac:53:72:6a:19:d5:ab:e4:64:e1:bd:97:
28:93:e6:eb:95:89:13:7a:dd:6a:af:3a:68:31:9f:75:cb:1d:
5d:ea:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:49 2025 by rpki-client