Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: uaYAqalWfjLdWpKSZWLvSvmoU3eAT0Snq3xuSJlEKTk=
Subject key identifier: F5:5D:56:7D:E1:EB:7E:AC:7C:16:8C:3C:E8:FE:7A:3B:B4:5F:8F:49
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 019A4E86A8FC88D7585B103997ED490BFE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: FunklG2W5WfFYvdlf6FDTITuqWYRh93crav9/K65Yc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a8:fc:88:d7:58:5b:10:39:97:ed:49:0b:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=f55d567de1eb7eac7c168c3ce8fe7a3bb45f8f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:67:88:13:9e:5a:00:65:c8:c4:f5:75:8d:
56:f0:d1:3b:f5:89:68:f3:cc:03:fa:86:14:57:55:
00:56:81:f2:20:9d:40:9a:40:e8:e2:ae:b2:27:8b:
71:2b:fa:5d:70:9c:75:40:89:90:4e:34:df:8d:d8:
b2:f9:da:ec:62:b3:9c:76:01:06:7e:9d:97:0f:19:
b2:ca:d7:6f:6d:8e:cc:2e:03:10:69:5c:4b:a1:d3:
30:0f:5e:ec:95:ab:e5:4e:64:05:37:2b:da:07:52:
86:fc:af:dd:a8:b3:6a:66:22:fe:8e:00:13:ea:71:
05:89:72:11:1a:c6:cc:24:02:f5:74:ef:71:0d:60:
1e:4f:36:fe:1b:a7:f3:18:29:6b:c7:c7:e9:6d:b8:
89:44:0c:5a:63:94:5a:9d:46:c8:ec:18:36:29:be:
d4:a6:ac:26:5a:74:42:70:75:f4:a9:d4:23:11:dc:
61:63:07:06:3c:5a:16:80:77:9c:d5:6f:50:2a:3e:
74:01:9f:31:40:3d:16:30:cb:63:31:7c:1b:29:31:
ad:30:eb:6f:fc:dd:00:6c:dc:5b:81:f0:12:bd:52:
e3:75:43:6e:10:96:60:a3:70:6d:23:15:0e:33:45:
80:de:a2:e5:c0:8e:9b:86:f7:75:2d:bb:0e:f9:55:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:56:7D:E1:EB:7E:AC:7C:16:8C:3C:E8:FE:7A:3B:B4:5F:8F:49
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5c:83:83:b6:c1:f7:19:86:ee:cb:85:07:8b:c5:9f:ee:12:
e6:6c:f0:9f:bf:b0:fb:4b:b9:47:11:66:e1:06:50:36:5f:b1:
d8:71:c2:20:7e:1a:64:83:37:b9:14:ad:0a:7c:a5:ee:3b:98:
75:19:45:70:b7:4b:38:02:42:4d:90:fb:8c:f2:c5:6c:61:fd:
c9:3c:1c:e5:5f:3a:b7:b6:9c:e9:c0:13:94:7b:26:80:4c:a5:
be:fe:f5:c0:ae:1a:65:de:e2:2e:3c:66:92:a9:4a:0d:4f:be:
e1:d0:f5:79:c9:94:dd:13:fd:8a:6f:84:4a:13:49:06:be:7b:
bb:bf:bb:f1:5c:ca:fd:88:98:30:20:17:98:3f:04:3e:34:de:
61:d6:c6:39:7e:0c:4a:2d:0a:34:57:6a:77:92:aa:6f:8f:8c:
28:05:ba:00:25:b0:19:0a:de:ab:f8:37:c9:ce:24:15:93:54:
5c:2e:ff:6d:bf:a1:99:c2:9b:1c:f3:a4:85:eb:c0:5b:01:f8:
4c:c0:68:c0:6a:6b:b7:fd:af:ec:98:99:b0:b1:58:79:f2:a3:
ad:09:45:36:7e:c4:80:bc:af:42:fc:c8:41:1b:e7:84:99:34:
dc:40:ba:71:aa:3b:f4:9c:36:0c:ae:14:38:4f:ba:52:1b:4d:
7e:d3:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:07 2025 by rpki-client