Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: djQj2h2Cv8wqtolqdNr7Bo6etk3R5GPxmpxnFHQVV14=
Subject key identifier: A9:6F:BD:1C:08:81:97:61:A4:99:F0:F5:32:B2:E1:CD:AF:97:E3:A8
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019A4D3D13975CFE257F04B8D43E17218655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 16F2
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: Votmpk2n8m8rD7F7ubFJ4utZCq5lXeOSmglVVBcP3+k=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:13:97:5c:fe:25:7f:04:b8:d4:3e:17:21:86:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=a96fbd1c08819761a499f0f532b2e1cdaf97e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:a1:d1:73:dd:5e:18:53:1b:47:98:1d:62:
3d:6f:8f:68:56:8f:6c:7f:8c:6c:34:dc:1e:99:01:
d2:05:52:cb:d4:09:aa:65:86:a9:3e:9c:cc:da:3e:
e3:fc:6f:c9:1e:5f:1f:33:ce:b5:44:4b:1a:09:10:
3f:ec:5d:65:e7:16:95:72:b9:13:fe:75:cb:b1:a3:
b2:78:6f:b4:25:9f:14:41:df:55:9b:39:78:89:af:
73:ac:8d:ff:1a:34:35:e3:b0:92:0c:af:9c:64:d7:
36:70:5b:46:85:23:4d:5c:e1:5b:3b:e0:d2:9f:05:
f6:ab:6b:df:13:8e:5d:1e:15:74:17:21:2e:59:c0:
3e:c3:be:d7:c6:5b:98:2e:41:94:6a:c1:39:2f:15:
25:dd:17:e4:99:80:e9:2c:d4:f4:04:83:ff:73:2f:
75:c6:83:8a:6f:47:00:d5:92:13:ee:d2:6e:fc:89:
0f:9b:89:a8:07:03:28:64:5e:e3:0a:0e:c9:6a:a6:
20:b3:55:a0:55:1b:65:f4:df:82:9d:8f:fa:4b:fe:
74:0b:29:fc:3d:a3:50:f9:67:ef:b0:e7:b3:47:da:
0a:ac:8e:b3:b9:6b:22:ce:9b:8a:27:9f:e4:00:32:
29:3b:92:18:76:2f:16:98:4f:1a:67:b4:95:1d:f7:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:BD:1C:08:81:97:61:A4:99:F0:F5:32:B2:E1:CD:AF:97:E3:A8
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:99:ed:35:2c:a9:e7:92:f2:3f:1d:4a:49:74:78:cd:65:
7b:3f:00:01:9f:b9:a6:31:0b:63:9d:90:81:3b:db:c9:70:de:
bf:62:10:7f:0a:e0:79:de:8f:98:69:0d:10:0f:30:2b:19:d6:
25:20:31:73:38:a3:99:bc:51:de:39:89:6d:84:ec:3d:27:fd:
d9:05:a9:ee:95:23:ef:d5:99:5a:14:9f:ce:c9:28:6f:a7:c0:
c9:98:94:e4:2e:fa:30:f4:28:1d:5d:34:de:bb:12:69:4b:c3:
ca:02:9a:69:d1:43:87:71:6e:c8:68:ed:7f:11:62:86:0b:02:
5b:c7:5b:56:10:ec:68:1c:67:c0:d2:aa:ad:6b:f5:97:64:65:
43:15:6e:4d:db:45:85:7c:87:29:13:69:34:d7:c2:2e:78:3f:
9a:9e:a9:76:49:6a:fb:7f:87:94:a2:ed:51:30:e2:81:a2:3e:
42:0f:5b:69:fd:8c:11:72:07:00:a2:8b:6c:b3:9e:b8:1b:3f:
78:62:9f:84:42:61:04:69:ad:fc:e9:95:4b:21:4f:09:ea:28:
64:61:de:db:01:f3:32:ea:a5:c2:67:74:1a:b5:c1:1c:07:06:
15:f9:ad:b0:58:ca:94:9d:ec:08:88:57:ba:52:2f:1e:64:9c:
ac:12:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:33 2025 by rpki-client