Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: Q9WD50OpE+N/2cFZeNQafiq7i5o0ncUdAlOvC2Jull8=
Subject key identifier: 58:30:36:67:33:E5:B1:20:67:07:6D:6A:53:70:76:01:5E:4C:D4:3A
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019A53E3B5A2B0467451164FF5D746062497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 06CB
Signing time: Wed 05 Nov 2025 12:00:23 +0000
Manifest this update: Wed 05 Nov 2025 12:00:23 +0000
Manifest next update: Thu 06 Nov 2025 12:00:23 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: M94F4Wm0tzZdsN/tsdsmGD6lsFHYn8DJAwn0DeQ+94k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b5:a2:b0:46:74:51:16:4f:f5:d7:46:06:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Nov 5 12:00:23 2025 GMT
Not After : Nov 6 12:00:23 2025 GMT
Subject: CN=5830366733e5b12067076d6a537076015e4cd43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:d7:b7:7a:a8:80:7e:1c:61:8b:58:8c:b7:
22:2e:f3:e7:bf:7c:05:fe:eb:3a:7c:56:9c:1c:6e:
9c:79:85:32:2d:64:e0:9e:88:7f:87:ed:69:4a:d8:
cd:44:9a:a6:86:cc:73:f0:9c:c8:32:91:ce:83:c3:
d6:f2:94:f2:51:8c:b7:c9:2a:41:14:7e:67:f9:36:
82:5f:27:d8:41:46:e5:17:c7:9b:9c:d9:61:df:58:
2a:1e:7f:35:4f:88:ab:58:be:e5:65:84:db:e8:d7:
14:fe:0e:96:cf:eb:0f:16:62:19:5e:0c:42:8a:86:
6e:29:9e:64:b9:22:a4:ac:d0:14:ad:d3:13:c1:14:
40:ce:14:be:c3:c2:2c:be:c5:66:be:ec:dd:c2:42:
af:b1:7b:5c:e2:cc:96:cf:f2:22:56:34:53:5e:6c:
b3:4c:8a:f7:42:1c:f8:47:2b:ff:11:2c:b4:92:d4:
ad:94:de:8a:4c:00:9c:a0:9e:58:96:40:eb:b1:2c:
63:2a:5f:59:10:a7:95:a8:77:cf:70:71:68:14:72:
ef:26:cc:12:3c:8e:7e:4e:0c:d4:ca:1f:37:44:cc:
1f:14:3a:df:82:48:6c:c7:29:a5:d7:f6:81:48:03:
f7:26:54:db:89:2e:cf:c8:78:3f:3d:0d:2e:65:70:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:36:67:33:E5:B1:20:67:07:6D:6A:53:70:76:01:5E:4C:D4:3A
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:30:14:fa:5e:7d:d8:e0:c5:54:55:a5:c8:75:ff:5c:bc:
e4:9b:06:24:87:d6:90:27:b8:17:0f:04:7b:a6:7f:57:31:da:
f2:bc:90:bd:6e:63:7f:00:97:ec:1c:c7:2c:e0:0b:12:09:37:
c8:53:ee:fd:f4:c6:6e:73:de:53:b4:03:04:75:d5:35:47:92:
0b:19:28:28:f2:d6:05:d0:52:4d:15:60:94:cd:9a:b3:0d:28:
4d:37:f4:66:d2:9a:ac:3a:64:c0:b0:f5:49:f4:07:dd:87:1b:
45:0f:f9:9a:37:ba:45:ed:77:65:05:48:3f:0e:e9:da:44:54:
46:69:18:80:86:e6:6e:38:ae:6e:8d:cd:32:17:b2:ea:c8:a9:
05:f1:74:e3:0d:d6:b4:7c:b4:7d:c1:de:45:6c:74:df:93:f8:
03:a0:e8:51:c2:7c:17:ba:1e:e3:fc:9a:a0:fb:2d:6a:57:20:
dd:2e:69:b1:f1:48:10:b8:f2:20:79:86:11:dc:17:97:86:66:
13:68:99:06:63:60:a5:4f:4a:ab:39:d1:c7:3a:99:0d:b1:a1:
da:92:dc:70:88:0a:9d:7f:11:92:fa:a0:70:b8:f4:0c:22:4c:
68:d7:be:f0:96:b9:5a:d7:35:f3:dd:66:6c:aa:b5:b6:a4:b5:
69:81:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:18 2025 by rpki-client