Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: ywPRFlUatgBNwFIey49BqAp86lYQqCVOWDfX1bC+M9A=
Subject key identifier: 61:97:2A:6C:37:0E:18:6D:4E:1B:64:19:E1:D9:12:8B:0C:E1:FF:BE
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019A503E5F85DCCC629457AB41D05817AEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 11C4
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: Xk6UGkIz2Ypve2pNOm+wu+5jAkXlfsz094o1r3uP5eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5f:85:dc:cc:62:94:57:ab:41:d0:58:17:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=61972a6c370e186d4e1b6419e1d9128b0ce1ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:98:42:77:de:78:a5:c7:a6:b3:06:69:d0:
e4:64:8d:81:b0:06:4c:fb:94:92:f4:b6:4d:7a:b4:
82:fc:2d:21:73:a6:23:b5:c5:82:29:5d:93:c7:66:
ba:31:48:13:18:6e:46:28:42:5d:0c:3f:ee:05:71:
e7:6a:e6:f1:f0:4a:28:59:45:a1:f9:40:84:22:8d:
c6:43:84:ee:64:8f:6a:55:08:79:78:fc:52:f3:cc:
03:01:b7:49:b5:83:b5:d3:e1:fb:79:86:db:5e:fd:
d6:9d:1c:a1:ee:93:f8:a7:73:bb:85:7e:4b:ac:9d:
d9:ae:db:b8:0b:53:11:d0:6e:3e:91:ca:8a:c2:1e:
ff:3c:46:0b:cc:45:02:01:ba:a9:89:be:fd:d2:eb:
25:0b:89:cc:76:65:f6:27:ca:4f:e8:c9:b8:04:a9:
e4:47:ce:27:00:5a:ae:03:8e:33:77:8f:56:df:e1:
31:d2:cc:ab:2b:c5:2d:97:46:a4:b2:d9:7b:8a:13:
81:6b:80:02:14:d7:10:46:9b:a1:fe:46:60:38:cd:
9f:e6:5b:28:dc:b0:16:50:d7:d5:e2:17:32:51:60:
dc:ac:62:4b:80:ab:00:b4:69:f1:fb:67:1c:39:5d:
77:e6:85:4a:1c:1d:5c:09:dd:bd:a8:3a:a1:b4:24:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:2A:6C:37:0E:18:6D:4E:1B:64:19:E1:D9:12:8B:0C:E1:FF:BE
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:78:fd:78:47:4a:53:cc:2b:90:af:96:1d:e1:6e:44:4d:84:
27:ec:4a:7b:24:94:fd:8b:ad:f1:e0:81:de:aa:61:79:56:55:
ed:84:c4:83:fd:b7:76:74:df:56:a6:4d:4b:d1:cc:9d:b0:b0:
cb:a3:f5:f1:21:bd:e1:ee:3d:e1:63:26:0c:e7:1b:88:02:dc:
d1:a0:60:30:13:9f:90:60:3f:c8:8b:66:2f:2e:e9:11:1e:6e:
1e:dc:36:fb:39:e4:de:50:3c:aa:fa:b8:96:e6:ab:9d:e8:39:
93:2f:0e:cc:f1:b5:f9:30:d3:9b:96:b7:5a:b8:05:e9:fb:75:
81:63:17:9b:ab:13:14:69:2c:8f:c4:f8:0a:89:b0:20:64:b3:
ec:0a:b1:92:a7:43:33:d5:02:7f:e8:f0:a5:11:09:dd:1f:09:
d0:e0:e3:a1:ab:3b:77:5e:d6:ba:94:35:e4:51:24:3d:3e:b6:
4c:ae:ef:9a:be:08:57:c3:d3:bb:3c:77:1f:59:dc:ae:aa:be:
2f:d4:2f:7b:47:cd:9c:12:6a:e4:35:f8:7c:51:5a:3a:6a:eb:
a8:df:05:f8:45:67:c7:f5:e4:de:c3:8a:eb:5e:8c:7e:3f:f3:
fb:a6:eb:7f:07:2b:ab:8a:c7:84:49:30:c4:6c:7e:fc:0f:cb:
7a:d6:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:51 2025 by rpki-client