Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier: 6aPs2TVYiUrHiRFyWkF3Q4+ytqgkQsJLbLKcP6juvt0=
Subject key identifier: A9:E1:D7:F5:82:61:E5:27:E5:A3:50:22:6B:3B:9E:99:6E:7A:57:3F
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019A522C84279F8755DF21A2A01B32478F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number: 33
Signing time: Wed 05 Nov 2025 04:00:40 +0000
Manifest this update: Wed 05 Nov 2025 04:00:40 +0000
Manifest next update: Thu 06 Nov 2025 04:00:40 +0000
Files and hashes: 1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 7Ri4wpum2UhoZEuc+dFJc/LfPLCXwvb0pkhlE+Px6NM=)
3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:84:27:9f:87:55:df:21:a2:a0:1b:32:47:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Nov 5 04:00:40 2025 GMT
Not After : Nov 6 04:00:40 2025 GMT
Subject: CN=a9e1d7f58261e527e5a350226b3b9e996e7a573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:aa:35:0d:51:c5:be:8d:1f:f8:ca:f5:2e:b2:
1f:2d:f4:74:36:fe:8b:ce:cc:49:bf:20:a9:23:ef:
17:ce:3d:28:bc:bf:a2:e9:68:50:db:46:4d:b1:6e:
e4:b2:bb:4b:e7:01:49:8e:1f:bd:f0:9c:08:a4:1b:
33:9b:53:18:15:57:00:fa:82:45:76:28:7e:6c:ad:
50:f5:4e:ed:e5:13:6e:01:ea:85:1e:98:25:49:b4:
35:db:7c:ad:26:23:70:c4:c0:5b:e0:7a:f9:e8:98:
29:8a:9a:09:37:18:d4:5b:00:41:37:a0:0b:be:50:
9e:33:62:cd:99:2f:30:57:66:36:48:54:40:f8:10:
1f:43:15:63:a9:25:31:3e:cf:e0:f1:4e:af:d3:86:
d6:c4:07:64:af:8b:ba:36:28:a5:47:89:e3:5e:61:
c8:35:5d:ff:e0:54:c5:44:79:29:07:9d:73:6a:31:
5c:93:5a:1a:1b:07:43:dc:4a:b7:b2:b2:36:ba:72:
b8:f6:a6:2d:2c:c3:45:0d:7a:be:f5:49:2d:0e:f8:
7e:90:35:aa:ca:10:9d:64:43:4c:e9:9d:83:e5:4b:
d6:e9:dd:c3:f0:26:3d:2f:ac:cb:03:6a:cb:ae:4c:
9c:cb:cd:e4:76:0c:4b:bb:4f:b4:9c:bc:f7:d1:73:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:D7:F5:82:61:E5:27:E5:A3:50:22:6B:3B:9E:99:6E:7A:57:3F
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a9:4b:dc:2a:fe:b6:d9:35:fd:16:81:17:74:a3:b8:5c:e9:
15:0e:96:26:c0:39:65:59:a8:c1:86:35:22:75:bd:b6:50:84:
83:a3:6d:c7:cd:e4:b3:ce:d1:83:89:97:56:b8:06:69:20:67:
7b:a5:2b:fa:9a:12:28:0f:b0:a9:fe:12:41:81:1c:8c:43:15:
83:fa:7c:cf:d6:14:ad:a9:d9:38:82:28:46:05:12:36:f2:a2:
6c:1d:65:7c:27:1f:e9:f3:f6:e7:15:e6:e1:27:3f:f1:98:41:
be:1d:b1:3c:a4:2e:6f:16:28:51:01:a7:72:fd:8f:f2:4a:b4:
97:6f:cc:6d:ac:65:6d:35:dd:6d:e0:a8:63:b4:e8:d0:9f:02:
49:7d:91:a0:57:6b:68:75:49:4a:0a:3f:82:f4:1e:69:03:27:
f0:7c:ad:5f:e7:6c:4c:6f:c2:ba:9a:be:01:a0:d3:d9:71:49:
fe:70:9c:cd:dd:97:a5:ae:2a:2f:9d:75:c7:ce:9a:d3:5f:7d:
4c:7c:1c:0e:2b:93:20:ec:15:da:a5:99:81:45:e0:ac:0f:99:
25:4c:88:98:c9:9f:c8:78:d8:60:b5:e0:ef:0e:76:d8:4f:71:
9a:78:92:e8:97:fc:15:45:85:45:4c:c4:57:34:90:bc:3d:a3:
e1:92:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:42 2025 by rpki-client