Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: p80VolXvHcZufMi48NBQz8aQEX3URsiHA/P+imXeYQo=
Subject key identifier: 49:3F:2D:8A:C9:02:4C:E5:21:44:CC:61:05:C8:D8:7A:FD:16:0E:B9
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019A4F62765F625ED51A1787AB68C17BCE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 02CA
Signing time: Tue 04 Nov 2025 15:00:44 +0000
Manifest this update: Tue 04 Nov 2025 15:00:44 +0000
Manifest next update: Wed 05 Nov 2025 15:00:44 +0000
Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: f3hQZL6Kvd9+PEVK9zv5X8TVtFgZYBjnTKvhSZncjdw=)
2: tI3vS8bXRpYk2uJT942ZTBiVKdc.roa (hash: m8AWxg57zCEgWp5C3CXYTmTH0M1td7C0p+1vWuP3iI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:76:5f:62:5e:d5:1a:17:87:ab:68:c1:7b:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Nov 4 15:00:44 2025 GMT
Not After : Nov 5 15:00:44 2025 GMT
Subject: CN=493f2d8ac9024ce52144cc6105c8d87afd160eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:f2:05:c6:09:94:fa:f0:01:b1:65:51:0c:
3a:4e:39:ea:69:5d:f9:8b:ba:c0:00:0a:23:5d:14:
5d:3e:40:34:57:3f:89:eb:88:9b:11:e3:6b:72:4b:
6a:58:08:fc:6a:7e:62:96:22:08:c0:1c:f1:ce:84:
08:07:4a:39:13:fb:f2:63:06:08:20:d9:2f:5b:fc:
d5:8c:2b:88:0f:c6:d6:36:4d:dc:f4:be:74:6a:9e:
2f:d7:11:24:96:7c:21:56:c9:ed:e6:25:86:f3:22:
15:ed:fc:83:2b:8a:fb:ed:f5:c6:2a:ff:a6:7f:29:
70:ef:00:cd:86:63:43:1a:d2:12:3c:14:77:b6:6c:
ff:8a:3a:04:b9:cb:d6:f2:e8:eb:89:a1:9a:bd:6b:
5a:9b:c7:7e:88:1b:67:7b:2f:2b:b7:08:ac:12:47:
10:cc:51:02:f8:9d:96:81:9c:b1:44:70:9d:b2:2f:
1a:70:a5:fb:25:06:2a:98:ad:54:f8:3a:6a:a1:79:
2a:66:b1:14:88:be:8f:29:9a:5b:91:73:56:1d:3d:
fd:20:f2:fc:3a:0c:24:8f:36:54:2d:78:0c:17:a5:
9d:cd:f0:2a:58:f3:a6:f1:cb:8c:88:8d:34:42:a3:
8c:bf:60:07:81:2f:8a:5f:75:09:3a:18:ae:ee:14:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:2D:8A:C9:02:4C:E5:21:44:CC:61:05:C8:D8:7A:FD:16:0E:B9
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:46:b5:e1:0f:3d:f8:fb:51:44:1b:77:2d:ed:e6:46:6e:97:
1c:e2:f6:26:02:aa:4a:69:68:75:92:fd:76:b1:72:ee:28:c6:
f1:48:0e:16:9a:9b:b6:d2:b9:d5:34:36:69:13:98:c8:2b:c0:
81:7a:a5:f1:e2:89:5c:9c:1c:25:84:a5:f0:aa:6c:a9:0e:d8:
17:af:ec:87:cd:32:d2:21:50:fb:d1:01:07:45:9a:51:bc:80:
45:93:18:ea:c8:46:ad:58:2b:64:39:98:25:fd:16:bd:29:cb:
84:45:04:a1:e0:0a:db:86:4d:8e:a7:4f:6a:9f:61:80:fe:2e:
9b:6e:71:b3:2a:5c:fb:b1:ce:96:f5:2a:1d:31:62:0c:75:da:
e6:82:88:ec:65:49:77:86:f5:c5:18:a7:04:e5:08:10:ad:ef:
0a:a6:33:bb:14:84:02:a0:d0:41:97:78:6c:6a:aa:57:50:f0:
e6:e7:23:bf:e9:35:91:c9:8b:24:93:80:c9:fd:3e:b0:9f:97:
3b:22:a3:b7:d7:d5:8e:98:41:9d:d7:fc:f7:39:68:24:c8:68:
b6:06:bc:1c:31:49:a9:14:15:bf:23:11:cf:da:88:6f:92:64:
64:ab:7d:20:57:af:9a:19:f1:03:f0:51:b8:4d:46:ea:fa:9c:
5e:ce:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:34 2025 by rpki-client