Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: OW29GSFjqtg4Dy8De4aEQm+WYmDjFimQMM3HZNQJnOw=
Subject key identifier: 2E:B9:D0:F6:9E:6E:A4:5C:54:36:67:CA:A8:50:4F:BC:39:99:09:C5
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019A4EF441D69F4F0FF99AB3479D8826435D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 0E60
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: VVTrom3frUT68wrfOWd9+aD4QwmKesHdSMKFoTgx5Go=)
2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:41:d6:9f:4f:0f:f9:9a:b3:47:9d:88:26:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=2eb9d0f69e6ea45c543667caa8504fbc399909c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:fe:68:6b:29:d6:69:32:05:58:64:0a:90:
bb:ae:7f:60:c2:f2:e8:7f:d7:3c:d5:e5:c3:6c:08:
43:6b:46:1b:de:1d:bd:9f:6b:9a:7f:8e:62:db:f6:
47:ce:58:6a:c3:11:38:14:7a:ea:6d:56:16:5b:eb:
9c:4c:02:7d:8d:c5:f6:b6:e3:ff:48:ea:47:59:15:
c7:71:2c:01:36:15:c3:15:42:d1:43:ae:6b:4e:42:
6c:a0:6e:d9:25:ef:87:85:57:01:b0:35:fb:42:00:
55:2f:0a:03:6d:43:e1:c3:52:53:19:19:09:02:f7:
c7:73:a0:97:a8:a9:50:30:33:20:cb:75:46:e2:d1:
6e:32:9c:f2:62:2c:ee:c3:50:d9:88:7b:8d:3f:0f:
e3:d1:a6:5a:25:36:d3:4c:c7:ba:f7:c0:81:93:24:
0b:ad:03:1d:23:0d:18:29:75:3a:28:e7:78:14:6d:
a9:06:d4:ba:5f:25:45:ab:44:6e:d8:82:51:c9:15:
a8:60:85:c0:5a:9b:45:7f:20:bc:6c:05:5f:90:65:
d1:62:8d:cb:6a:16:50:d9:e5:f6:f1:3f:a5:01:e9:
bf:9c:29:66:17:53:09:22:a1:68:2f:1f:78:a2:7c:
0d:fd:08:94:d2:e8:df:b5:99:a3:e0:d8:0a:b5:e5:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:D0:F6:9E:6E:A4:5C:54:36:67:CA:A8:50:4F:BC:39:99:09:C5
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4f:20:82:88:78:1c:7e:cf:44:67:70:ab:14:bf:d1:3e:04:
6f:9e:be:73:f4:ac:d5:58:69:eb:10:d2:33:96:7c:9d:15:f5:
a5:e4:58:ae:db:54:05:6d:ab:6f:68:1d:d3:47:e5:94:fe:2a:
a2:d6:8d:e8:38:22:ca:c9:0e:ae:95:4d:82:47:db:6d:d5:85:
df:50:0f:90:f6:31:e0:65:34:97:23:86:40:16:f3:c5:31:31:
d1:8a:74:11:40:23:c1:06:70:97:b0:b5:58:dc:f7:32:b2:16:
b6:d7:76:68:b7:6f:8f:b0:f6:65:1c:60:be:3b:64:e2:39:c5:
7f:6d:4b:2a:14:94:49:7a:c1:06:fc:b0:a0:c9:33:79:e0:aa:
09:e0:43:13:1b:24:a2:e2:4b:b7:41:4b:f7:d1:77:02:c3:e6:
fe:c7:80:f8:fa:4d:35:c8:ba:96:5b:60:e5:d8:2b:10:67:c0:
b3:05:c4:ee:bb:f9:57:0f:3d:bf:35:93:fe:35:6b:c9:6b:c0:
10:68:0d:43:98:67:f0:4c:4f:91:0b:7f:a0:3a:6d:4d:7b:9c:
55:12:15:31:e2:03:2a:26:66:d3:aa:b9:24:37:5a:d8:31:14:
81:5b:87:cc:92:7b:65:a3:88:db:5f:a2:5e:f0:7b:ef:ab:c1:
b0:df:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:24 2025 by rpki-client