Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File: jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier: CJw1S2AJ0xj2O0QC1rEQiKWEMxN+sWu7SmwgHVjJmAo=
Subject key identifier: 2B:E9:CB:14:CB:97:5A:A5:0B:1B:C7:13:EA:87:E4:30:39:1E:5E:8C
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 019A4E18BDBE6E33D61407E8833980623E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: iiGLWaz4jgINUk6om+UAygLYFgcWHIWp55WT2S2w0SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bd:be:6e:33:d6:14:07:e8:83:39:80:62:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=2be9cb14cb975aa50b1bc713ea87e430391e5e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:37:02:a4:02:7b:9f:0e:ce:63:8a:ae:c3:
8c:a0:d3:bd:21:3d:93:2d:75:52:5e:6a:5e:55:54:
fa:db:7f:b2:49:31:76:83:95:8c:6d:b2:a4:b7:13:
9e:74:d5:93:94:b8:12:2c:08:7a:f4:5f:14:75:2e:
8b:ca:65:20:0a:f2:3e:9c:7c:d3:62:b0:f8:48:77:
4a:4f:2d:fc:46:1d:a8:41:1b:46:35:4d:6d:32:7f:
2c:d4:31:36:1f:2e:00:9d:30:e8:94:2b:52:ae:34:
fa:e9:bd:a7:3b:15:9e:fc:70:1b:05:73:c5:b0:fc:
85:03:42:dc:8e:19:3a:7f:0a:c7:16:6f:6b:fe:ba:
fd:24:ee:ef:b0:20:90:f0:11:83:b4:60:02:14:22:
2a:f7:22:58:60:18:b6:0f:03:77:ca:bd:11:f7:ea:
c7:d2:a0:13:a4:c7:08:f5:d3:8d:64:dd:a4:8d:ce:
21:ca:69:58:6f:f0:3b:3a:22:10:1b:52:48:8e:a0:
b9:8b:cb:ec:f0:69:68:86:cd:6b:d1:3c:42:d5:30:
91:0a:50:b7:19:ee:23:1a:a1:29:3e:f5:83:c0:97:
d1:79:96:3e:b4:f1:c2:db:f6:88:14:01:a7:4c:70:
80:b3:0d:68:7c:a2:df:c0:7a:6a:bd:46:ac:8d:55:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:CB:14:CB:97:5A:A5:0B:1B:C7:13:EA:87:E4:30:39:1E:5E:8C
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0f:b8:3e:44:b9:d4:bf:75:75:76:ca:55:6f:62:b5:05:cf:
fa:4d:68:41:94:b7:b4:ed:ea:a0:db:fb:d0:d6:f2:8c:6e:cc:
45:c3:c1:15:3c:f8:50:c2:33:34:fa:95:f5:92:43:3c:fb:38:
1d:17:58:bc:d0:a6:95:18:c5:c4:d7:36:7f:01:96:d6:c4:0c:
30:3d:8f:ed:3f:07:82:13:af:5b:48:e3:ab:0f:a4:68:e7:4e:
41:06:c0:b7:fd:bb:3f:20:92:73:f0:3b:a2:7a:42:f1:67:74:
13:d8:06:1e:e3:c2:25:45:6f:7f:53:92:2c:ca:71:17:39:bc:
6c:a2:fa:a6:2b:42:8b:2e:c7:9c:68:74:4b:ae:60:71:e5:2f:
bc:e3:23:4e:34:c6:d1:ae:ee:20:c3:81:45:1e:86:5c:c5:3d:
e5:61:14:b9:4c:31:dd:15:58:33:03:c6:c5:ee:c5:d9:96:20:
db:b5:5a:1c:08:49:a6:cb:bd:d4:46:40:67:42:ae:50:02:a5:
cf:90:bb:3b:43:46:62:5f:9a:23:7c:98:c4:23:79:0e:d1:0d:
18:f3:a1:8d:7d:20:59:70:f5:98:f1:ff:cf:e3:be:03:5e:65:
1b:e6:d4:a2:6d:14:f6:8f:ec:5d:8d:2b:6d:d5:bb:e3:e9:cf:
a2:17:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:09 2025 by rpki-client