Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: z0AMN4AdmJk2Zuc7D0qx/tO1SmcV5mWcLCuik3f8IY0=
Subject key identifier: 53:06:48:A8:1E:74:E7:85:C3:C5:3D:E9:70:46:53:A7:EB:22:9A:D1
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019A4EF46C7CA7D2F4001A017DF76986C47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0DDF
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: rfgDFXRSuPKSurFH2vUyDM7BXuc/8vPl0B6Jyi3s8L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6c:7c:a7:d2:f4:00:1a:01:7d:f7:69:86:c4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=530648a81e74e785c3c53de9704653a7eb229ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:21:37:fb:42:72:c7:35:e3:42:09:59:11:
18:e9:6c:df:f2:6c:fd:27:80:9a:8b:20:84:0c:f1:
1e:53:d6:d9:9a:f1:c8:66:dd:9a:b4:63:c2:d4:64:
3e:46:0e:05:e1:d5:49:a1:2d:63:3b:07:59:50:80:
51:af:b7:6f:08:f9:d2:7a:2a:16:26:71:5c:10:5b:
da:8b:5c:90:d2:33:b5:12:10:74:f5:03:2e:7c:d4:
9f:26:a5:b7:6a:b5:93:1b:9c:14:cb:b1:10:9a:26:
b5:b7:c9:6f:24:54:35:2a:a2:c9:ad:f0:da:bb:97:
c5:a3:b5:c6:be:9d:43:bf:0d:34:fc:ce:23:9b:e6:
4e:02:23:30:49:8a:57:7c:20:cc:1b:ce:71:93:5c:
fd:5d:a2:e1:98:e3:bf:81:2a:74:6b:6f:5a:25:75:
b2:72:c6:2b:83:f6:c3:ee:f7:7a:57:3d:ac:4c:18:
c7:85:77:58:03:7a:14:99:d9:28:59:69:6e:4f:a9:
af:70:1d:77:88:7e:b5:bd:95:1d:ca:54:a2:6f:2b:
d3:ca:d1:25:a6:29:7d:3e:d8:a8:ca:03:d0:8f:b6:
30:3f:31:0c:e6:56:fc:65:fa:ab:6e:1f:c3:0d:69:
be:c5:bf:33:f7:cc:98:4f:1c:b4:05:cb:2a:58:40:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:48:A8:1E:74:E7:85:C3:C5:3D:E9:70:46:53:A7:EB:22:9A:D1
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:f6:0a:2a:f2:b8:11:31:23:c2:da:fb:fe:8c:52:3d:c0:
4f:21:0b:f2:bf:9d:b9:35:68:f0:78:3d:d6:14:42:4d:dc:3c:
60:d2:b1:2e:99:c2:a8:83:e9:62:65:22:95:38:3a:68:04:20:
50:e8:0b:ce:cf:1a:a8:aa:10:8a:00:2a:4f:12:39:2b:8d:cc:
13:2d:e6:b1:2e:34:dd:ef:6b:6e:bf:13:8d:0f:18:be:57:0f:
d2:cd:68:e8:05:35:0a:4f:02:bc:2a:a2:28:01:00:72:6c:7f:
fc:51:b7:77:df:e3:48:38:63:b4:8b:44:82:8e:2f:bc:34:03:
78:e5:4e:90:29:3a:e3:31:de:05:0b:32:d4:3e:e1:34:42:26:
5e:5e:34:6b:88:95:59:32:48:c3:ed:d7:2b:a1:23:b7:73:d2:
2d:a1:a0:48:99:5d:4e:05:32:8b:22:ab:51:b5:7a:c5:e8:f7:
8c:04:89:77:00:b3:c8:73:77:65:b8:5f:77:d3:77:2d:92:d2:
d1:07:a9:aa:fd:45:c1:84:e3:d4:b0:b1:ed:d5:50:99:5e:e8:
35:68:0f:d5:6d:c7:46:b2:20:31:0a:16:0a:a2:45:a3:3a:64:
e5:c8:73:cb:78:2c:2f:df:03:d3:29:8e:c7:34:a0:2a:9c:f2:
0d:c0:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:07 2025 by rpki-client