Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: HggJemrR/UVWDUsdvkGnpkD0GuDiecKrnYxHO2CFT7o=
Subject key identifier: EF:5E:E3:BB:DA:D3:D3:8D:35:3C:FD:A2:53:25:56:93:3D:8F:8A:B4
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 019A4EF4CAA22E50E5FE700DF30A47A802B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0FCE
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: rIz5OSGF3vlMXM2xfNakWGXsG+SJgv83wptbBjGvGt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ca:a2:2e:50:e5:fe:70:0d:f3:0a:47:a8:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=ef5ee3bbdad3d38d353cfda2532556933d8f8ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:81:ca:2e:02:3b:39:18:41:78:b7:69:81:
16:7b:39:ef:0e:82:ae:5c:31:aa:8c:1a:53:6a:2a:
fe:8e:22:7d:af:f3:95:ec:e5:4b:d3:87:3b:ae:5c:
7e:a2:44:44:21:da:4d:53:a6:7b:b8:de:b2:4e:b4:
4c:ca:32:78:91:63:2b:c2:8c:94:b9:87:df:39:f1:
ac:11:3c:ff:27:04:ae:88:ec:e9:0d:c3:12:6c:f5:
5f:5a:a7:30:7c:0a:09:a2:2d:c2:e5:a0:5f:36:6a:
fa:67:83:44:cd:27:2b:02:98:9c:95:09:e7:97:3a:
06:a9:32:6f:1f:ad:aa:5b:14:4e:45:b5:a7:a0:89:
3e:f8:a5:bf:02:b7:24:fa:4e:6b:d2:a6:5c:43:5a:
6a:00:17:42:c1:e1:14:40:2c:cc:0c:91:7f:7d:b5:
73:cd:94:41:3a:10:41:2e:a4:bb:ad:96:74:d0:72:
69:fc:8a:89:25:66:0c:d8:79:ec:cc:0c:55:36:e8:
df:24:f1:f2:9a:3a:9f:9f:7f:5f:65:6c:f4:e6:e0:
b2:86:70:19:84:e9:e4:f1:50:e1:57:a1:da:e3:43:
fd:df:62:a9:8a:f1:07:85:ef:82:4e:bb:59:f5:be:
55:de:9b:67:3d:ce:8c:45:8f:51:34:96:51:c8:f6:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:E3:BB:DA:D3:D3:8D:35:3C:FD:A2:53:25:56:93:3D:8F:8A:B4
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:eb:4e:0f:51:22:4d:0f:dd:0f:02:b3:40:0c:fd:e1:78:88:
60:b5:14:5f:ce:7d:39:28:f3:23:bb:b0:92:62:a1:05:25:50:
07:04:06:26:26:5c:4a:97:7c:fe:f3:a1:88:9d:9d:a9:e5:09:
92:37:87:fd:16:4b:6f:8f:2f:e8:81:65:07:33:2e:16:b6:8b:
8e:ce:73:09:89:c1:38:27:74:73:70:6c:e5:01:b7:6c:ce:b7:
33:25:3b:85:3c:08:e1:12:46:4e:e5:dc:27:71:e0:4f:8a:a7:
42:bf:b7:e5:30:fb:35:28:97:5d:e3:52:61:02:92:6e:0f:b3:
c8:55:70:a9:c1:9d:2b:3c:80:e1:fa:82:be:9b:cb:55:24:96:
eb:58:a5:82:ea:70:e6:d0:f0:ce:92:a5:f2:8b:ec:92:f7:2f:
a4:45:8a:4d:4f:4b:b5:e0:e7:7f:bb:35:ad:fb:10:69:cd:47:
43:77:2d:af:b3:8d:b3:d9:b7:47:00:45:4a:79:24:17:dc:62:
c2:bd:b9:f8:58:0b:6c:d9:5e:78:74:c5:4a:35:a9:68:2e:4b:
a8:dd:a9:29:df:78:c2:95:9e:53:68:52:21:0f:f3:6b:67:1d:
36:ca:0d:0c:ca:cd:15:77:43:0e:b3:4a:4f:1b:1e:74:f7:80:
25:11:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:09 2025 by rpki-client