Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier: 2loBtn6B04ZC3jPV8NtyDNi1bZ12a4HWGREQ9hzsjh4=
Subject key identifier: 25:18:7C:C9:DD:08:AD:D1:A0:D9:D6:B6:90:6B:5C:C5:64:E7:A9:61
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial: 019A4E18EA1055E55BF70F1855FFC3F2B847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number: 1238
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: z3Z/2qK0geLXx0M6D44U+DbHeXCUuHiUyQ+jq169OZw=)
2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ea:10:55:e5:5b:f7:0f:18:55:ff:c3:f2:b8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=25187cc9dd08add1a0d9d6b6906b5cc564e7a961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:9a:24:88:90:90:b1:5d:78:b0:30:d0:e9:
1b:ac:ec:2f:f0:0f:7b:60:cc:b0:9c:3b:a8:76:73:
82:02:2d:c8:80:fc:7b:24:a1:45:2d:04:29:f8:37:
70:f1:6f:ac:9a:7f:3a:e2:a6:0e:19:7c:a6:07:86:
ff:ea:f5:93:c2:87:df:c5:a0:86:02:72:89:f2:75:
12:d4:ac:95:50:18:b1:b7:02:67:7a:f4:be:5a:86:
2a:94:de:67:67:73:9d:f8:6f:c6:5b:ad:28:85:04:
a6:43:93:82:04:25:01:90:86:44:cf:96:31:72:b4:
f3:45:ed:56:b8:d7:ab:c1:96:2c:87:f5:5d:77:24:
1b:53:ac:37:63:bd:7e:4d:27:07:b2:ff:37:a0:30:
57:ab:07:01:c2:1a:41:67:42:a0:0b:23:d3:14:f9:
5f:fc:c3:f0:c9:54:ad:93:0e:98:b0:e9:2c:89:26:
df:ca:52:8e:fd:f8:36:22:1a:db:7e:7d:72:c3:34:
8b:08:ca:19:c9:24:41:31:d3:b0:c1:6c:65:8e:70:
cf:e7:2b:09:e0:ae:e0:6f:0b:0e:c1:d1:2f:91:7f:
3b:9c:e4:fd:58:b7:95:38:08:1d:63:e6:07:8b:73:
a0:3d:5f:02:b3:5e:fa:84:cc:c3:4c:53:7d:38:34:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:7C:C9:DD:08:AD:D1:A0:D9:D6:B6:90:6B:5C:C5:64:E7:A9:61
X509v3 Authority Key Identifier:
keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5c:bd:92:5e:41:cb:f9:18:ee:d7:2c:b9:da:ec:9b:66:dd:
29:9e:22:37:83:55:00:d3:c7:bc:28:fa:a9:83:a4:6f:e9:46:
06:a9:fe:62:21:13:30:22:02:22:64:3f:d2:66:e2:25:cb:e1:
3e:80:36:3d:51:d9:23:da:95:3b:d0:23:46:5c:d4:e3:a1:a7:
e5:cb:d9:2e:e9:47:21:2a:b7:80:4f:05:e1:d3:f1:c6:e4:23:
ff:6b:a0:be:1b:15:74:d2:7c:6d:fc:f2:49:a3:82:64:c8:6e:
c2:30:e9:9a:99:2a:63:01:2e:4a:35:eb:2e:7f:50:b1:cc:70:
48:2f:71:26:24:0e:21:3e:39:21:41:39:f4:51:15:06:f5:b2:
21:a0:2f:0c:6c:bd:af:e8:25:fd:d6:9e:4a:95:f7:65:6f:54:
18:c0:5d:27:ec:eb:69:d9:e9:de:e4:9d:c4:21:d7:7b:de:c6:
48:fd:94:82:59:e7:e4:d1:6b:a3:84:49:c3:eb:9f:18:40:69:
24:49:4c:77:62:dc:12:e7:e1:bd:6e:c8:5e:aa:a1:c1:a8:4b:
0c:e6:b8:50:f3:93:f4:d2:22:f2:38:16:f3:37:b3:ee:20:35:
fc:4e:73:e2:d9:90:3f:cd:8a:ff:5e:d4:6b:bd:4d:8c:2d:aa:
f9:70:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:10 2025 by rpki-client