Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: G1FyHIYoHGNGyv5SG1e+QOIqy6gIB40ZcE4dElMg1xk=
Subject key identifier: 90:AD:D8:DA:93:2A:99:D2:66:1C:06:C6:72:6E:79:7C:83:46:1C:8C
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019A5299F1FDD5471874C83C492B895012C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 04C0
Signing time: Wed 05 Nov 2025 06:00:11 +0000
Manifest this update: Wed 05 Nov 2025 06:00:11 +0000
Manifest next update: Thu 06 Nov 2025 06:00:11 +0000
Files and hashes: 1: i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa (hash: v5GClXo0hTRItLv1LLR9D2MpJboOBKsEHK/lxMtobJ4=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: DCvjsymY2yUaa6ha/cvH6kwnYTJTVFMbBju8T90Abug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:f1:fd:d5:47:18:74:c8:3c:49:2b:89:50:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Nov 5 06:00:11 2025 GMT
Not After : Nov 6 06:00:11 2025 GMT
Subject: CN=90add8da932a99d2661c06c6726e797c83461c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:a7:4c:4f:6e:3e:75:96:1b:a9:d9:9b:27:
b4:9e:b6:75:ed:58:83:ff:0e:ad:76:b3:73:46:44:
49:ba:17:fd:32:17:6e:21:c9:6f:d3:db:03:65:e1:
99:ba:7d:86:4d:04:61:d9:7b:20:a6:4b:2c:47:b4:
40:0e:44:6b:32:37:89:e3:e3:60:36:84:32:53:10:
01:5d:c7:b4:43:d4:ce:29:70:b9:98:cd:97:10:2e:
07:62:30:fd:67:f0:0e:5b:dc:ff:b7:1b:60:a4:8d:
ac:2f:bb:a7:0a:8b:7a:c9:5e:60:0e:51:67:98:79:
ce:89:0c:9f:cd:8d:25:7c:4f:49:c6:26:f1:29:b3:
b6:60:82:d6:0b:36:2a:88:a6:c7:cb:ad:00:02:31:
f8:0b:15:22:5b:4c:bf:09:2b:c7:d7:da:26:22:14:
36:20:39:a5:75:21:e8:60:23:77:7c:1c:0b:ee:2f:
e0:7c:a2:3d:f9:f6:e0:2c:44:75:96:27:27:80:3b:
15:94:4e:33:9b:d5:de:5e:fa:45:00:f0:19:ca:c8:
14:12:fe:06:c2:b6:e4:d4:0f:2b:e5:99:ab:b5:6e:
9e:36:70:09:e2:a7:5d:49:77:7f:82:8c:21:89:b9:
e8:31:95:b0:5f:0c:94:6d:5e:1b:51:5a:72:55:d0:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:D8:DA:93:2A:99:D2:66:1C:06:C6:72:6E:79:7C:83:46:1C:8C
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:53:8b:a8:02:4f:7c:20:d2:62:8d:d6:0e:cc:76:52:91:c0:
5a:53:e0:bb:2b:81:18:00:5b:d8:1a:61:3a:7e:51:88:e7:0e:
6c:f4:e6:8a:df:45:78:aa:c6:4c:78:1e:36:e7:43:e8:01:03:
31:53:14:38:45:45:ce:73:62:1b:e4:f8:d3:59:97:cb:f4:5a:
88:35:d1:7c:13:4c:89:f0:b5:00:78:19:d5:2f:d4:4d:c0:68:
7d:cf:07:22:0f:a5:ef:85:bf:a0:96:f8:96:e1:72:aa:32:bb:
ea:ff:55:3b:28:90:2d:d4:e0:54:e4:5a:96:a9:ba:d5:b4:90:
1b:82:04:bf:5c:51:13:a0:25:03:ea:56:75:36:8f:f5:ba:6b:
84:25:ff:4e:eb:f6:39:dc:3a:16:a5:71:73:99:d6:bf:60:4e:
bc:6f:98:2a:12:7b:f1:a8:cd:08:dd:a7:d1:de:36:d6:0d:84:
7f:69:92:e1:ab:a9:ca:aa:e0:e1:40:c6:54:1a:a2:8b:ba:21:
70:d1:21:15:61:53:13:a8:2c:2b:03:db:b8:36:d1:26:a8:07:
cb:f0:d1:88:6f:d3:e4:0e:88:59:3b:e8:d7:53:c2:3b:77:2d:
ba:76:8e:5f:ab:87:15:2d:4f:e4:7f:07:a8:ca:0f:4a:97:b0:
4c:f7:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:03 2025 by rpki-client