Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: afAgxJHt/2fT8i3ocwpJ/0jUm88mzMKLWm5CVR6gllc=
Subject key identifier: 9C:19:93:46:F4:CA:5D:1D:BF:D6:DB:68:5D:7B:D8:94:60:18:37:98
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019A4EBD56C8673480567EDD54DC6DDE7A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0A08
Signing time: Tue 04 Nov 2025 12:00:22 +0000
Manifest this update: Tue 04 Nov 2025 12:00:22 +0000
Manifest next update: Wed 05 Nov 2025 12:00:22 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: UpsLwldpm+MIU3SjoD05ON+YYAA0UV8mnl4hS5CeSpo=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:56:c8:67:34:80:56:7e:dd:54:dc:6d:de:7a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Nov 4 12:00:22 2025 GMT
Not After : Nov 5 12:00:22 2025 GMT
Subject: CN=9c199346f4ca5d1dbfd6db685d7bd89460183798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:10:0c:44:d8:d1:f3:7e:94:5f:3f:32:aa:
31:7e:b0:94:94:e4:c7:ef:d6:c8:c1:ea:04:aa:67:
44:85:ba:2c:d0:a7:db:02:33:dc:28:dd:1e:91:de:
14:86:ce:bb:b9:56:17:d4:c1:9a:6d:41:ab:5b:30:
42:38:7f:c2:4b:7a:5d:1c:8f:6f:c6:0a:79:c8:6b:
7e:b9:8f:cd:94:8a:b7:b5:88:7a:3f:36:02:74:8a:
f1:c3:be:37:4e:71:bb:c6:0c:19:35:13:c8:49:e3:
d3:23:27:a3:fc:4b:fd:56:2d:58:d7:a2:b8:a3:3c:
16:f2:58:86:35:c0:c8:ab:11:a9:ab:e0:88:b1:a9:
c1:8e:ab:65:c8:86:03:50:4b:b7:10:6b:76:64:13:
ed:0c:6b:ca:23:75:f9:94:2f:b0:ff:b7:0e:7d:b8:
c5:7d:35:06:58:5b:a5:06:d4:5a:7a:d3:bb:85:f5:
3b:47:50:b7:5f:4e:bf:97:36:70:88:9b:78:3e:c0:
04:5f:1e:8f:84:e4:a8:cd:f4:49:20:dd:11:2c:fa:
c7:6a:c6:4c:52:2d:dd:2e:60:1f:70:f6:e0:fc:c0:
2d:5d:76:52:8c:ce:9b:fd:1b:fc:ca:36:54:82:ad:
bf:3c:18:4a:68:52:c0:d9:da:70:f1:ce:57:a7:52:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:93:46:F4:CA:5D:1D:BF:D6:DB:68:5D:7B:D8:94:60:18:37:98
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:dc:75:57:45:65:68:93:7a:24:01:38:da:33:75:79:f6:
64:54:bc:2f:c6:b0:3a:ba:46:65:cb:6c:c4:2f:23:62:23:d3:
39:97:69:5b:42:24:db:f6:60:24:eb:74:f3:c9:7a:55:06:ce:
5f:86:32:3a:70:8e:a9:0e:69:0c:2c:b3:06:26:37:b7:e7:5c:
f1:fd:29:10:48:69:4e:97:ce:c0:5a:81:3f:f5:95:df:19:46:
9c:29:06:ef:c3:e5:5d:3b:04:a7:bf:c8:dd:74:5b:16:82:76:
0f:e0:16:20:ff:e0:74:03:13:f0:75:97:ec:ef:be:54:db:eb:
5e:14:6d:32:9c:1c:67:91:92:bf:1e:cc:30:6e:78:25:a4:0c:
91:3e:9f:44:91:87:6c:5e:2a:b9:a6:cc:0c:57:22:a0:ac:28:
d9:a1:9e:5f:62:40:72:8d:fe:52:22:83:23:fb:87:ab:72:e1:
be:0a:19:c2:c6:be:59:0a:be:2c:92:a2:9f:a6:31:25:57:f3:
5e:ff:de:6b:9f:bb:69:72:71:ab:0d:91:d4:54:d5:44:b6:ca:
7d:4f:fb:20:35:36:db:f2:7d:1b:86:37:44:c1:ee:59:3c:c7:
0f:d1:ea:e8:35:0e:62:9a:a5:70:83:06:98:1e:66:ae:24:ff:
23:d4:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:55 2025 by rpki-client