Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
File: jAz2W63ZqIrMwydQC1_ynR_wkZY.mft (raw, json)
Hash identifier: rsoCmaJc0r2GcKc2+pin8M7C9GVKHGErCy77snizGgU=
Subject key identifier: FC:7C:13:AB:5D:F9:78:57:CB:D4:CB:5C:90:26:99:A9:01:34:E8:38
Authority key identifier: 8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
Certificate issuer: /CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Certificate serial: 019A53E3E5FE2692F8FCA4D55FFDA5DD1AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
Manifest number: 01C2
Signing time: Wed 05 Nov 2025 12:00:35 +0000
Manifest this update: Wed 05 Nov 2025 12:00:35 +0000
Manifest next update: Thu 06 Nov 2025 12:00:35 +0000
Files and hashes: 1: Odu_8Z8wYQ4rAwGBZ2rfmaKWPvY.roa (hash: G+0rnOlwTF853BxAQkBgLndsmH7cjPaqnqIy5TqAej8=)
2: jAz2W63ZqIrMwydQC1_ynR_wkZY.crl (hash: 5I2zC1gI1GmiRsa7FxfwHYhJneUuPzuZAbH8mnDeE2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e5:fe:26:92:f8:fc:a4:d5:5f:fd:a5:dd:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0cf65badd9a88accc327500b5ff29d1ff09196
Validity
Not Before: Nov 5 12:00:35 2025 GMT
Not After : Nov 6 12:00:35 2025 GMT
Subject: CN=fc7c13ab5df97857cbd4cb5c902699a90134e838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:d0:2e:66:c1:c9:83:c1:b5:03:b6:2a:75:
38:41:08:25:a6:4c:46:05:9f:1e:b2:8b:b1:28:d1:
94:df:5d:f1:17:e4:74:8d:a9:62:33:6d:1b:85:db:
0e:aa:36:ac:a8:c0:a5:e8:0c:6d:8c:cd:de:ae:94:
d1:08:c3:de:ba:df:24:23:45:47:43:1f:6f:b5:c8:
ca:25:40:3a:12:ea:5d:11:49:02:1c:16:49:6a:84:
c2:e3:12:95:ab:28:9e:66:9d:50:b3:b1:c1:80:91:
31:e7:3b:e8:61:fc:9b:17:c6:aa:06:be:15:c5:ce:
19:6d:ac:49:50:01:33:83:97:08:d2:19:b0:a4:68:
89:24:70:3d:9e:b4:3c:7d:ee:d5:5f:de:77:6e:1f:
74:68:79:0c:6b:a3:e5:98:f2:53:ae:85:78:81:ea:
e4:d9:f7:dd:e7:64:2d:43:a4:61:37:3c:32:fe:0f:
04:75:cf:ad:b0:84:10:1f:8f:9f:08:45:c7:4e:2b:
5e:41:29:67:31:ca:76:26:88:71:18:fa:cc:76:22:
c4:aa:10:1e:22:51:31:79:73:42:43:50:ae:f1:c6:
df:af:3d:66:02:e7:d4:51:85:7e:76:9c:e9:77:a4:
bc:17:98:73:bc:08:21:10:3e:b5:7e:62:a3:2e:a1:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:13:AB:5D:F9:78:57:CB:D4:CB:5C:90:26:99:A9:01:34:E8:38
X509v3 Authority Key Identifier:
keyid:8C:0C:F6:5B:AD:D9:A8:8A:CC:C3:27:50:0B:5F:F2:9D:1F:F0:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAz2W63ZqIrMwydQC1_ynR_wkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfd8c0-d7af-4db1-9e04-975a80d0d93f/1/jAz2W63ZqIrMwydQC1_ynR_wkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:db:e1:71:cc:4c:52:35:53:6d:f3:b4:cb:ea:ee:6a:e6:
a0:a5:61:69:1a:96:c3:a3:8c:5d:b6:37:85:ce:27:3f:ad:8a:
9f:46:fd:84:db:2d:1e:d8:22:47:11:b0:2e:c4:5f:79:8f:43:
7b:d5:e0:5e:aa:a7:28:71:b8:d3:66:07:ca:6e:35:3d:ef:c9:
e4:3e:57:62:74:01:c8:96:cb:6e:1f:dc:bd:5e:5d:e3:13:f8:
50:b4:26:ba:7e:86:09:48:8e:d4:4c:48:a6:58:80:ae:99:0c:
89:65:61:38:bf:3c:9d:18:8c:9f:2a:b6:6b:ee:e7:43:12:b3:
8e:ac:79:00:28:ac:71:f5:98:b6:27:34:45:ed:8c:6c:47:8c:
b9:ff:f1:f4:13:70:bc:c8:8b:67:52:7b:bb:9e:42:f1:79:87:
49:2a:a0:e5:b7:e3:43:44:5e:94:a7:b2:3a:f2:a0:3e:4c:16:
cf:85:13:1b:b5:6d:d4:45:2e:9f:ab:8f:86:69:a3:b3:17:9e:
34:9e:40:8f:d8:3d:6b:62:60:b8:02:d9:7a:94:29:35:05:c8:
ea:d6:ae:52:fb:67:e6:80:71:b1:fc:8f:a6:11:64:a8:69:0e:
79:73:6f:b5:24:4c:73:9c:f2:8f:ff:34:3f:1e:a7:cc:c3:95:
b5:35:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:16 2025 by rpki-client