Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: xtdLnYM3Qh9isAQsJ2fYPnnrL82PwRG70RX7mC+AkGg=
Subject key identifier: 29:1D:DE:69:A8:FB:2D:E5:BA:92:8B:B0:B4:C7:51:65:F9:E2:5E:62
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019A5119A9C6AF80A359EDC6C973D6017280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1635
Signing time: Tue 04 Nov 2025 23:00:27 +0000
Manifest this update: Tue 04 Nov 2025 23:00:27 +0000
Manifest next update: Wed 05 Nov 2025 23:00:27 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: tEN36Z2WttN3rPHwpU59mI+s8naBz2m82NVLd9pd/0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a9:c6:af:80:a3:59:ed:c6:c9:73:d6:01:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Nov 4 23:00:27 2025 GMT
Not After : Nov 5 23:00:27 2025 GMT
Subject: CN=291dde69a8fb2de5ba928bb0b4c75165f9e25e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:0a:84:15:2a:39:a9:e6:a5:73:e1:a2:71:
8b:16:ad:c2:bb:ca:86:71:8a:50:36:f7:66:53:a7:
34:2e:8f:8d:5d:fa:8a:b3:e0:69:86:ba:88:60:a6:
5c:a9:01:17:d4:c9:cc:c6:3e:f9:12:79:f2:0f:99:
a1:05:67:4b:9d:02:dd:e5:7d:4a:ef:9b:56:97:5d:
5b:fe:10:52:ae:ff:e0:9b:24:cd:d5:6c:22:12:8d:
3c:85:43:13:05:9d:5e:39:c1:b5:6b:b9:43:32:84:
82:0f:63:b0:c9:cd:2a:10:fd:40:43:5a:1a:66:61:
ff:14:df:f9:de:bf:b3:c3:97:56:b1:48:87:52:65:
79:ff:a6:bd:96:6f:a9:ff:24:92:c8:fd:2c:80:bf:
ff:4e:4f:25:71:59:ef:0c:6c:f5:38:d0:32:33:c0:
e4:d6:b1:fb:32:2b:9a:78:8b:95:87:70:77:70:ae:
2a:4b:d2:35:90:8a:a9:a6:a0:e2:80:83:4b:0a:e1:
ec:07:6d:2d:bd:71:12:b1:90:65:e3:7d:5b:96:b0:
e0:a3:ff:bc:7b:0b:1b:e7:17:82:5c:f3:f2:7b:94:
07:1d:5a:02:bb:8b:80:d6:ab:06:d5:84:c2:1a:0d:
53:f4:7e:33:05:d4:97:28:14:b5:b4:5a:7e:e5:68:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:DE:69:A8:FB:2D:E5:BA:92:8B:B0:B4:C7:51:65:F9:E2:5E:62
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:03:f5:b3:0e:fa:33:0e:79:01:03:e9:45:18:03:de:60:58:
9a:d2:f3:7f:9d:7a:ba:3d:b6:b8:a2:5a:56:19:b9:2e:92:2d:
b3:2b:78:d4:49:50:c2:27:b0:0b:d2:35:e9:64:49:ac:b8:76:
dc:75:45:2f:27:78:98:39:d6:08:26:35:65:a2:54:9f:09:8a:
bb:0e:5e:41:b1:e2:43:53:cc:8a:c5:a3:d0:a3:e2:88:06:55:
85:53:00:ca:df:d3:58:8b:b6:24:3f:2d:03:12:e2:ff:4c:5f:
e7:37:b9:ea:cb:f1:2f:07:02:1a:0a:ae:29:3f:40:fa:b2:b2:
33:d6:33:ce:fa:f3:94:9d:9a:5b:a5:fe:9a:a0:37:2c:54:f3:
b1:32:7e:9e:ec:da:02:6b:af:dc:35:75:f3:41:f9:0d:08:3b:
8c:7e:2f:3d:11:4a:83:d7:3a:65:34:ad:df:73:76:88:1f:eb:
62:af:30:a9:35:89:0a:42:19:44:ab:b8:d0:46:07:d8:9b:05:
0e:c1:07:b2:f3:13:22:54:7a:14:fc:f2:ce:86:7c:9d:31:15:
67:bf:41:31:d9:7a:b0:f9:dc:f1:68:ac:43:c4:a4:ac:23:35:
f4:73:ec:b5:10:f3:52:60:74:06:50:a4:5b:32:48:a7:17:02:
5c:c2:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:49:07 2025 by rpki-client