Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: V6weCVEGcdzyAZ3JkGQoV6XCSaBuO5vCN/7621j9yYc=
Subject key identifier: 4B:4B:2A:C0:00:3E:1C:83:9B:A8:BD:DC:E1:CB:A2:D0:11:BB:80:D6
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 019A4E86C919168BB486DD45D65E93A1EA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 09D6
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: Cr+K3lPNt6QlnT6y8+qN/hMLvHfAZUZuxgntDEojYec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c9:19:16:8b:b4:86:dd:45:d6:5e:93:a1:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=4b4b2ac0003e1c839ba8bddce1cba2d011bb80d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:89:43:e2:f4:6f:5f:51:8c:7f:ea:8d:1d:
9a:c5:f4:f7:82:60:69:96:89:02:98:2c:0d:32:95:
ed:3a:2c:eb:e3:82:90:9e:86:75:87:af:ab:b1:f9:
0d:d6:22:0e:b8:a3:8b:bb:96:85:cb:13:ab:5c:30:
e1:d7:11:a4:d7:80:c4:7e:e9:fe:d6:62:45:a1:f6:
bd:e5:51:af:2e:50:4f:89:e8:fc:ba:b2:12:7f:6a:
a9:d9:04:15:02:ac:78:09:70:64:36:9d:2d:29:24:
3a:f1:6d:b0:e3:7c:af:17:72:91:52:41:01:f1:22:
46:0b:c4:eb:be:bb:fe:38:f2:57:15:59:32:37:a0:
6a:2c:25:3d:b5:25:ac:70:8d:f6:b6:25:7b:cb:f9:
0f:ba:98:03:1d:f7:31:c3:26:65:8f:91:fd:43:71:
a9:03:21:44:1b:5e:df:78:50:4f:a4:0b:d9:10:0e:
55:fc:bf:28:6b:dc:cc:54:36:e7:31:aa:12:1b:91:
9e:f3:cb:3c:f5:b3:89:b4:3a:a2:3a:92:85:e7:28:
d2:c4:9d:dc:22:32:89:48:34:7f:18:22:38:8b:6e:
e4:c6:7b:0a:a5:f5:ba:d4:4d:ca:5f:a9:ad:66:4e:
fb:b2:8b:ce:63:18:2d:44:de:a3:63:3a:dc:d0:0e:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:2A:C0:00:3E:1C:83:9B:A8:BD:DC:E1:CB:A2:D0:11:BB:80:D6
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3a:08:7b:04:a0:c9:a0:db:4d:44:8d:c6:4c:aa:8f:70:e0:
34:35:e2:8f:f4:6d:e2:db:95:b7:1d:c9:e8:31:cd:07:59:b0:
0a:db:60:58:4a:86:7e:34:6d:0e:ae:92:fe:4c:60:94:de:fb:
15:7e:67:20:e1:72:25:68:a3:19:f4:60:e7:d6:80:f7:5c:69:
c4:09:55:b2:07:ed:0e:e2:82:e4:e3:9f:6a:98:34:13:9a:de:
b6:da:ba:3d:58:61:55:4b:9f:66:83:fa:49:7d:3f:f1:2d:98:
18:58:f3:db:38:4a:3f:11:fb:33:bb:e4:04:39:e7:de:a5:95:
02:d2:86:b3:fb:07:27:b0:59:97:66:b4:87:e0:ff:5d:97:fb:
41:06:5b:db:a4:90:de:2a:9a:af:8e:57:c0:0e:32:fb:df:06:
0c:c5:5b:b6:1a:69:c9:5a:2f:9c:1e:a1:7f:65:e2:d3:a6:86:
b1:d1:e4:2e:cf:4a:6f:60:ff:38:28:9d:51:94:ce:11:a5:d5:
2e:e7:73:0f:c7:91:54:a2:1f:d1:dc:7f:d0:06:98:1c:32:08:
80:5c:7f:6f:04:12:ad:9e:ed:58:6b:1c:cd:fd:d8:82:c3:c2:
41:2e:5e:90:2b:dd:3c:31:5b:4a:3f:a8:55:b2:60:da:f4:d9:
89:66:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:53 2025 by rpki-client