Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: LIAd6j0Yo10GR5O8cv2UTrxtQ+nd1iZCDc5ax0gXIjA=
Subject key identifier: 05:74:7C:25:39:F4:B2:1B:28:DC:B9:4E:26:63:7A:A2:23:00:19:28
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 019A4D73B3ADFEB8541A9664BE2708BE5E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 0492
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=)
2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: JXQey+mNPSyhpcdPOHF4jTGGZKIv8cB4e/X/w1hAPp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b3:ad:fe:b8:54:1a:96:64:be:27:08:be:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=05747c2539f4b21b28dcb94e26637aa223001928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:12:bf:9c:39:cb:6c:27:16:62:3d:ef:e7:
97:b9:e3:e9:0b:eb:70:7e:ae:e5:a9:81:6b:72:68:
0d:07:4a:2d:1c:7c:8c:a5:a3:a9:4e:4e:6d:2b:22:
97:a3:22:ac:93:94:c3:e1:c3:03:48:b0:2f:ed:4a:
45:0a:67:e0:cb:2b:82:99:3e:6d:cd:a2:e7:b3:95:
ec:a6:07:af:ee:e5:8c:61:95:0d:80:81:84:ab:e5:
c1:65:e1:9c:e5:1a:7b:e3:09:62:dc:09:3d:3d:0d:
df:f2:f7:7e:fb:2c:35:72:6c:2f:6a:de:79:66:c0:
bf:9e:ed:af:f6:b7:f8:70:f0:52:df:69:f1:46:e8:
1d:4f:e9:ac:95:d4:2d:40:81:32:61:25:95:96:a6:
31:ee:23:64:f4:a8:25:66:4d:4b:f6:6b:48:c0:c4:
88:aa:4a:7e:49:84:a8:b8:1c:02:8c:7f:94:48:b7:
2e:ed:fa:48:e8:ce:32:8a:bb:c4:1a:1f:b0:e2:89:
b9:9b:8f:51:80:14:39:20:cf:20:35:17:8a:5c:3b:
93:60:90:91:92:82:2f:eb:5b:16:3b:b3:0d:57:12:
a4:5d:ec:91:16:e6:5d:30:4a:03:46:34:a3:4a:ba:
9e:aa:06:4d:4a:80:cd:ce:89:61:a9:6e:c9:fc:77:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:7C:25:39:F4:B2:1B:28:DC:B9:4E:26:63:7A:A2:23:00:19:28
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bf:03:4a:8b:62:be:f6:6d:b1:5e:30:62:4e:fd:b4:82:d7:
eb:0e:39:1a:0c:2f:98:c8:d7:ae:9b:66:38:4f:8e:63:5e:cc:
93:3a:e2:b0:cb:f8:64:52:4e:75:af:a8:21:82:09:4e:af:0a:
45:25:cb:42:36:b0:94:44:d4:23:24:e0:2d:34:b3:da:fb:73:
97:e0:5b:f7:39:e7:e8:90:ef:b0:8f:2e:3b:38:35:00:ea:8b:
3b:e3:92:e4:e6:3f:27:7d:19:ff:8c:8c:e0:12:e1:0c:d5:a2:
77:d6:5e:c3:22:77:1a:a9:e0:69:fb:28:43:53:cf:04:05:e7:
83:33:f7:4c:3a:08:6e:8f:2a:c0:3b:5e:54:f6:0b:22:97:0a:
8d:86:87:9b:ad:81:3c:30:37:70:52:85:04:fe:5c:b8:df:d3:
97:f1:22:56:eb:5e:91:e1:3f:33:d3:53:8d:61:c4:1d:13:66:
50:ce:3e:36:a9:44:ab:8f:58:7f:60:c4:7f:c5:7c:87:01:eb:
cc:6d:a1:aa:6a:21:99:cd:a4:cc:44:b2:6a:7e:28:ae:32:d9:
f4:aa:d1:89:b5:e4:65:c5:73:67:57:2f:24:71:72:46:26:bd:
e3:2f:69:88:df:d1:3b:5e:57:fc:89:ec:92:16:70:e9:70:a8:
1c:86:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:14 2025 by rpki-client