Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: gTau6P6RTNCIUxw7Wve/Y3ZbhwMgMQermvvTatnkNF8=
Subject key identifier: 98:75:5E:6A:6C:02:BB:AA:1B:9B:19:8C:0C:B7:6F:A1:BD:E7:54:FC
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 019A51F55671D56AD0BC9E71A72A4D20D2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 05EF
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: BLKlhOd5pZsdxSSwiVeNjCTu2nn9r1n+mt+iABPsV+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:56:71:d5:6a:d0:bc:9e:71:a7:2a:4d:20:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=98755e6a6c02bbaa1b9b198c0cb76fa1bde754fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:f3:45:b1:bc:dd:02:b0:c2:7f:76:a4:51:
01:9a:44:be:c6:66:26:d4:cb:2a:1f:7e:a4:1f:f5:
fe:7a:aa:68:bc:01:a9:3f:2a:a3:c8:28:f0:e6:9c:
d9:57:9b:34:75:77:03:a6:fa:f9:17:45:93:e9:0a:
30:dc:88:59:85:1c:f9:32:eb:ca:e5:e9:52:4e:ab:
4a:31:1d:d0:84:20:24:61:b9:80:3a:4d:0b:eb:28:
8c:c8:6e:fa:33:c2:38:06:56:35:05:ad:2f:be:37:
21:7e:fe:97:c7:86:d5:ce:50:fa:79:e0:90:01:9c:
e2:c0:e6:73:51:c8:e3:b0:6e:b1:e1:f8:f3:44:d3:
ca:3b:d7:82:a4:0e:e5:e7:48:20:c4:d7:8c:e7:7e:
0b:15:9d:98:c8:32:0d:e8:e4:1d:7e:03:83:51:44:
06:a8:74:d7:7f:e9:18:03:8c:2d:5a:40:72:bc:11:
70:be:b1:37:e8:2d:33:7a:52:67:f2:68:76:a7:21:
89:6f:ff:d9:0a:f3:76:8e:74:24:c0:b3:ba:11:c2:
b3:7e:76:7e:5d:d1:72:23:c9:45:06:27:b2:63:7c:
a3:84:48:0a:80:46:62:9d:cb:f9:2d:f5:59:a9:cb:
1b:e2:ff:d8:5e:c5:ee:93:1e:10:88:99:91:53:d9:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:5E:6A:6C:02:BB:AA:1B:9B:19:8C:0C:B7:6F:A1:BD:E7:54:FC
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:c4:63:7a:0e:7f:ab:5c:ef:3e:38:7a:fe:b9:ca:07:e3:
9a:23:20:fc:7a:0f:41:ea:58:08:5d:ec:4f:ae:01:40:6d:1e:
21:76:ca:66:75:ac:a2:8e:b2:1c:b0:d2:a6:17:63:87:44:7f:
dc:ce:06:85:34:c4:43:84:f0:96:a6:c3:11:70:ac:8d:00:0c:
82:29:86:ca:13:10:ff:d0:64:e0:26:f7:34:3a:f3:6c:d3:57:
ca:4c:e2:14:a5:2e:09:0d:66:99:77:15:42:43:46:33:d2:64:
99:62:39:50:86:72:d6:34:98:16:c6:8b:1f:74:4c:0f:2c:9e:
be:a9:b9:1c:fe:14:8c:aa:77:53:32:97:c8:a6:d0:cf:9d:de:
19:df:d3:8f:e9:fd:c9:14:af:e2:41:94:9e:bd:30:3a:31:60:
0c:d9:41:1f:6a:b7:56:6e:b2:a6:ef:97:18:6f:2d:02:cc:9e:
85:a4:d0:ad:14:75:6f:76:0b:e1:83:b9:e7:8a:0c:52:66:45:
7c:6d:f2:21:19:ea:67:03:ab:bb:13:c1:ad:98:46:6f:10:75:
f1:9c:a5:34:58:17:98:01:bb:74:0c:31:28:96:68:b3:2c:a8:
b2:d2:bb:96:fc:7a:88:63:40:2f:0c:5a:08:a7:45:5c:18:94:
fa:0e:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:58 2025 by rpki-client