Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: f52XL7u7juXME4TyY2J1Ohbp6sXnnBqwHfu+FkOi3lA=
Subject key identifier: D1:5F:09:84:68:C7:8E:16:42:60:6A:70:2D:F6:A0:1E:F5:17:9E:33
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019A5074D028E05B7308E2E894EC8CA04B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 15F0
Signing time: Tue 04 Nov 2025 20:00:23 +0000
Manifest this update: Tue 04 Nov 2025 20:00:23 +0000
Manifest next update: Wed 05 Nov 2025 20:00:23 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 1gsfvTjCvzqPom3y20Gz8NJV9NQASyaRVzp2xwVLBa0=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d0:28:e0:5b:73:08:e2:e8:94:ec:8c:a0:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Nov 4 20:00:23 2025 GMT
Not After : Nov 5 20:00:23 2025 GMT
Subject: CN=d15f098468c78e1642606a702df6a01ef5179e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:9c:f1:69:34:0a:03:4d:4c:eb:8f:f2:7b:
ca:d0:7d:f2:49:f0:69:ab:70:18:7d:6a:46:c7:d2:
9e:91:54:8a:2d:4b:dc:10:94:6d:74:ba:b8:97:c9:
da:47:64:63:0a:6f:f4:f7:2d:f3:db:3b:44:27:05:
b1:24:89:65:2e:ce:ca:b7:ff:f6:5c:a1:32:bd:b9:
d6:96:1a:d6:02:30:cb:e9:4a:db:f8:48:dc:d1:1e:
7a:b5:3c:87:16:8e:86:26:0f:7e:97:fa:ab:97:f6:
06:47:14:a9:ad:c0:9c:af:52:a0:12:ea:a6:dd:bf:
9f:f8:3f:1d:d4:d5:c1:77:15:9e:ae:4c:f5:a9:20:
40:c5:1b:34:0b:0b:f0:20:ee:1b:c1:d8:1f:24:20:
a5:08:16:25:dd:ae:cb:ee:08:47:ad:a7:79:ab:4b:
40:92:f9:85:36:b8:33:fc:bd:c7:a8:dd:64:1b:52:
f3:f6:f5:92:6e:b8:d7:a5:95:0e:91:38:ec:da:3b:
63:7d:51:ae:72:fd:91:b3:17:c0:6d:2c:11:19:85:
19:0d:2b:01:af:7e:00:fb:2d:9b:8e:d1:8d:ed:9f:
8a:d6:3d:8d:6b:26:46:8c:e6:55:ea:91:cf:3d:dc:
f4:6f:5d:2a:bd:8c:11:6e:d7:06:f1:a9:cf:0e:8a:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:09:84:68:C7:8E:16:42:60:6A:70:2D:F6:A0:1E:F5:17:9E:33
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9f:f8:7f:1e:a1:f0:bc:29:c1:85:f3:35:71:fd:c8:89:46:
13:71:da:27:53:29:3c:71:f6:cc:86:77:ca:87:03:12:36:96:
07:53:3e:fe:84:fe:b4:43:f3:1a:9e:bd:42:50:6f:12:6f:0b:
06:0b:b9:e1:5a:d8:0c:e9:8c:31:c7:b2:38:5a:3c:3a:c5:3c:
56:ca:fd:2d:09:39:6f:d2:59:ab:06:f7:47:f6:cb:ed:43:2b:
ce:41:93:f5:a9:55:b3:43:c8:3b:ff:8f:58:14:26:7b:43:86:
a1:70:1d:a9:25:48:27:67:12:8b:9d:8b:c3:6f:4f:30:93:70:
b4:cc:6c:27:04:4d:5c:aa:5e:01:b8:3d:43:b5:df:80:87:4b:
27:92:e7:3f:12:49:fa:be:67:0c:2e:f0:f9:a8:d7:3c:51:17:
8a:79:aa:52:8c:c7:41:98:57:79:f7:0e:49:da:3f:40:71:17:
4a:12:d7:9c:79:34:5f:b3:89:24:34:6d:30:33:60:9a:2d:30:
f0:01:6c:53:5e:bf:ba:6d:88:e5:ee:3c:af:0c:76:a1:4b:df:
d1:e9:9d:aa:a2:c7:aa:0c:dc:97:31:30:d6:b0:fa:f5:7e:85:
b9:ce:fa:1b:17:62:f9:9b:02:b9:35:40:67:25:2f:64:16:d1:
c4:a6:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:56 2025 by rpki-client