Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: Ovl+z8CF1s70f07KLf7r4C5mtwJ1yyqErpzDTPS9bII=
Subject key identifier: D8:0D:12:47:CE:3D:4F:A0:2F:C4:E2:95:5A:AE:0C:AB:D0:65:43:0B
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019A4C9869AC5FD58A8F5CA761E1BD4D9C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0BE1
Signing time: Tue 04 Nov 2025 02:00:48 +0000
Manifest this update: Tue 04 Nov 2025 02:00:48 +0000
Manifest next update: Wed 05 Nov 2025 02:00:48 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: AWMN7s719BYUQsjKVMlfqqALugB2jsBKZwByAhDBI3g=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:69:ac:5f:d5:8a:8f:5c:a7:61:e1:bd:4d:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Nov 4 02:00:48 2025 GMT
Not After : Nov 5 02:00:48 2025 GMT
Subject: CN=d80d1247ce3d4fa02fc4e2955aae0cabd065430b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:13:3f:96:c4:e2:4e:ee:d0:f0:a2:96:18:
ad:d0:2e:56:78:13:57:9c:53:c5:b8:48:a2:14:37:
fe:e2:85:bf:98:eb:cc:36:8f:2e:79:29:7e:b5:bd:
b5:8b:fa:bb:66:43:9f:98:37:4d:78:e7:d7:e3:1d:
11:41:74:54:ab:0d:fc:55:14:db:9d:12:55:bd:21:
6e:a8:d8:0b:d2:c6:d8:dc:9c:05:e0:94:77:78:64:
14:ef:04:14:25:c0:7f:e6:44:7c:ab:82:e0:e0:ef:
6f:10:9d:e9:f8:13:27:7b:74:01:89:61:c3:4b:a0:
e0:6f:e4:c7:9e:b2:b5:9f:45:02:13:84:9d:0c:71:
f1:b6:36:c9:a3:83:e3:66:25:81:da:6d:6d:75:e4:
62:39:71:2c:e8:1b:3f:3a:c7:66:5e:e3:4f:e5:69:
6e:9f:1a:83:23:44:1b:b2:91:24:be:52:0a:59:96:
13:f5:f1:fc:2b:49:73:28:ad:09:00:9a:1f:73:47:
52:c0:25:4e:eb:ec:c7:ed:2c:1f:1e:aa:f7:82:b8:
26:7e:00:c4:7a:26:e5:bd:a5:49:f5:c5:b8:8c:fe:
52:c5:de:40:24:08:a1:93:09:f2:cb:fc:be:f3:31:
bb:88:ff:07:06:0b:4a:94:1e:e6:11:ad:1d:ee:49:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:12:47:CE:3D:4F:A0:2F:C4:E2:95:5A:AE:0C:AB:D0:65:43:0B
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:18:cc:3a:79:56:fa:6d:0f:09:92:ae:b2:13:60:26:c5:
51:e7:58:61:04:d0:f6:2c:3f:3a:62:a2:76:6d:58:94:73:33:
f5:ff:b5:37:8f:3e:d9:01:9b:1c:34:6f:4d:d2:66:20:c9:38:
4d:e7:96:0d:62:6a:49:26:4d:c1:0f:19:95:8b:40:1c:61:ac:
e9:1a:c4:a4:07:6f:f6:35:13:52:59:be:44:10:3d:67:9e:df:
85:48:f8:23:38:f9:d7:7d:0b:0c:72:e5:49:8c:1d:d0:3e:4f:
fb:fc:3f:e8:8c:6b:48:2d:c9:4d:b7:a9:64:43:72:ae:18:ba:
f8:41:5f:a1:4e:4e:04:d1:46:c1:25:65:c2:b0:aa:5a:08:78:
13:5f:c1:ce:c7:45:c6:a4:a1:76:52:bb:e9:03:6a:bc:37:6f:
d0:be:a7:e7:1e:2a:72:b4:52:19:8d:09:b4:80:3c:0a:51:bf:
65:46:32:13:d1:5a:b9:44:2b:9c:31:2b:b3:6b:37:ac:5d:9f:
63:34:c2:94:4d:e7:11:74:b2:43:55:74:b2:17:6f:a4:b7:33:
12:14:cd:62:e2:13:a0:c6:d3:59:5d:96:78:d7:fe:b5:fe:1f:
40:08:f1:e7:86:56:27:e2:43:bf:c6:16:22:dd:91:a7:7f:67:
f8:c0:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:23 2025 by rpki-client