Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: 7xMOHDuPu03/r0D818zpB4KKKguyojAsWP1EO+pGYQY=
Subject key identifier: 9A:3B:F3:B5:8A:21:5C:D8:15:BD:BD:6B:C2:DD:3B:35:7F:2A:A9:A0
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 019A53E3B817BEB946F5E7635AEEC8E09F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 05F0
Signing time: Wed 05 Nov 2025 12:00:23 +0000
Manifest this update: Wed 05 Nov 2025 12:00:23 +0000
Manifest next update: Thu 06 Nov 2025 12:00:23 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: rJaTrHDVse2EPNKOmO50VPGGpHSu0Tf8lKnpbYGNPaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b8:17:be:b9:46:f5:e7:63:5a:ee:c8:e0:9f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Nov 5 12:00:23 2025 GMT
Not After : Nov 6 12:00:23 2025 GMT
Subject: CN=9a3bf3b58a215cd815bdbd6bc2dd3b357f2aa9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:fd:b7:b6:37:a0:2a:fe:d8:d5:ce:91:a6:
a1:f8:f8:17:4f:06:fb:99:df:30:a9:23:02:e8:d0:
a6:89:fc:0d:76:5e:87:60:49:1a:e6:58:e2:a5:fe:
14:76:6b:5f:fa:e9:23:3b:7c:82:a6:61:d4:f4:a3:
63:92:05:85:c1:99:4d:10:1b:e2:9e:91:34:cc:d8:
69:2e:ad:62:db:29:c9:e6:a8:8f:79:4c:e6:5f:ec:
e5:42:81:12:66:fc:1b:2e:53:47:7f:16:f4:f8:cb:
46:a8:bf:9f:63:32:ba:44:c1:26:02:f0:6d:c5:b7:
3f:23:66:d4:9b:82:33:73:96:f4:00:d5:df:6c:c7:
ef:ef:d3:bf:a5:5e:2a:0e:a2:0c:c1:af:0b:3b:f0:
bf:73:9c:06:21:d1:9f:e1:ee:de:36:e9:32:42:90:
8a:48:a2:3f:40:c8:71:3c:3f:30:0c:b5:a9:71:31:
44:78:5e:ad:d5:3a:04:e9:e8:28:c0:8d:64:15:12:
35:16:c2:e0:1f:ac:dd:c1:0d:62:6f:e0:d6:65:0d:
5c:3a:69:35:0d:98:8a:35:22:89:65:b5:0b:4f:e5:
68:91:41:09:63:6a:bc:ad:92:72:d4:ca:63:64:01:
04:f0:61:ce:70:a3:12:94:3e:9a:f1:2a:b4:fb:8c:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:F3:B5:8A:21:5C:D8:15:BD:BD:6B:C2:DD:3B:35:7F:2A:A9:A0
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:32:7e:0b:19:2a:db:64:1e:ee:ea:bb:b5:87:27:2d:a7:
e0:91:96:82:a8:ea:a7:91:9c:57:f9:4e:93:97:bb:9f:47:84:
02:e3:d0:ed:79:b0:35:5a:2f:56:4c:f6:ec:c2:94:25:6c:a5:
a0:0d:11:13:f6:e5:5c:60:58:3b:d0:48:4b:3e:2b:9c:5f:ec:
9c:3f:a4:ba:0d:fd:64:38:81:44:16:89:a4:9d:9b:f5:b8:37:
98:81:d3:d5:75:75:ee:43:ee:98:75:e3:b2:8c:00:51:81:30:
b0:ac:73:4c:7f:95:09:b2:f3:78:3b:d4:b6:eb:9b:03:c6:bd:
51:c4:77:e7:7b:bc:64:f0:a9:c3:6a:3b:f0:0c:17:81:bb:de:
35:fd:6e:0c:8c:7d:a5:74:69:93:1e:92:30:cc:94:1b:54:e2:
15:7d:6b:a5:95:65:de:76:db:76:47:be:d8:1f:cb:5c:f8:63:
0e:c3:02:94:f2:d2:12:62:6d:bc:ff:7a:34:7e:02:78:67:5a:
82:58:be:a7:62:04:13:fb:93:71:07:aa:4b:5d:cf:f3:69:90:
f2:8b:fb:6f:a5:be:73:3b:43:cd:80:90:01:f9:ed:2e:da:9f:
82:3e:63:de:ef:58:82:db:45:99:51:81:1f:7d:26:b8:98:d3:
3c:b3:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:45 2025 by rpki-client