Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File: Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier: 90FAdPaSI0JPhFqW2k0oc7EvhcvMDUPCKx65gtpGMiw=
Subject key identifier: 02:FA:0E:6B:45:D4:08:F4:01:CA:09:C8:4A:25:AE:0B:52:E2:CC:78
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial: 019A4F98E5DB5ED0F8FE022E0049CAD10A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number: 1330
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=)
2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: CgwHH6M+8fDwbAZplnxTjKqnXB+NMiDDW9SOXz/2eZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e5:db:5e:d0:f8:fe:02:2e:00:49:ca:d1:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=02fa0e6b45d408f401ca09c84a25ae0b52e2cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:02:c7:d4:85:40:fd:b0:c0:9b:e6:7a:50:
58:b8:9a:51:6b:18:ea:e9:0a:79:c8:15:1c:54:73:
cf:d7:c5:4d:de:60:98:18:28:59:c1:9b:7b:a7:f4:
27:f5:83:e7:90:ff:c7:9d:a0:d2:5c:44:08:3d:28:
4e:85:6a:32:38:f2:6e:8b:78:44:3c:44:64:82:22:
6b:ce:fd:fd:0e:a4:43:cc:d6:dd:88:86:54:7b:db:
c2:87:66:a6:31:38:3d:e9:16:d6:97:17:96:8a:45:
30:05:14:e6:a9:11:e7:47:d8:18:cc:ed:1e:2c:f0:
dc:b9:2c:a5:fc:f6:4a:3a:ff:5a:cb:1c:00:54:ea:
da:2f:c8:ac:e0:83:de:06:f5:c6:b9:17:28:76:1b:
6b:01:3e:e9:6c:0e:58:9c:75:cd:5d:cb:6e:fe:42:
34:6d:7a:8d:5d:17:9e:ec:77:31:f8:51:6e:c0:a2:
65:78:b2:20:d2:5c:b2:cb:98:06:1f:f4:99:e8:96:
2f:1b:72:1b:78:c5:ad:08:6a:a3:f5:6b:01:8b:aa:
1b:40:d3:5a:cb:fe:41:ad:ba:9f:15:21:2e:45:d0:
b7:e3:ce:71:67:4b:53:95:51:c2:3c:af:c3:02:ff:
ee:c0:28:ce:c2:65:50:0c:8e:f7:3c:72:48:1e:18:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:0E:6B:45:D4:08:F4:01:CA:09:C8:4A:25:AE:0B:52:E2:CC:78
X509v3 Authority Key Identifier:
keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:5e:db:7a:d2:be:62:08:e2:00:59:97:59:db:31:0d:c0:
f8:1e:f5:e9:2a:c9:88:3d:4d:9b:40:e6:22:68:2f:40:78:0d:
f8:d2:3f:df:85:5d:68:a2:0a:64:26:96:b6:48:a3:1d:f9:b2:
69:94:a3:c6:1d:54:f5:97:be:74:5f:4a:b5:a5:8c:10:8c:30:
63:2e:7f:df:bf:71:d3:45:57:99:7c:8e:4c:6f:81:13:17:04:
9a:ec:4d:a3:3f:a5:a1:b9:fe:0b:6f:43:65:1a:be:ab:ce:27:
2d:77:fd:16:fe:b3:06:0c:c8:b9:bf:26:1c:53:21:f3:d6:52:
43:d8:8e:d9:ec:53:e0:25:54:fc:a3:02:62:a5:e9:70:ec:4f:
57:a6:f1:02:c9:2c:38:32:04:eb:3e:b5:1d:19:47:34:45:66:
fc:7f:c7:06:4f:4e:79:e9:03:41:79:f7:e5:54:c9:50:c9:a1:
19:41:e6:39:6a:c3:2d:ba:5e:99:47:7e:0c:47:61:55:8c:ad:
c2:59:48:a5:05:c7:07:a3:e2:d9:01:c8:27:05:0d:c3:19:00:
6d:0a:23:e6:13:59:1e:f9:9b:5f:95:39:97:7c:0c:35:30:14:
8f:7f:dc:22:6f:7a:17:96:8a:93:8b:93:95:16:47:82:90:aa:
54:ff:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:38:03 2025 by rpki-client