Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File: 0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier: tp6Q5oMPNsR7a8qTsZRmaPr/lqsSQVq/A4/puLur1ng=
Subject key identifier: 70:60:64:21:E9:EB:AF:94:17:5F:3A:B6:65:CC:D9:95:21:81:96:3E
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 019A4EF475295A19BDD34ABE8CED0027A79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number: 142D
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: RQh0fHuHYrbkPQHNcs44od8zSgg4xEgFom0zt4sSEZ4=)
2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:75:29:5a:19:bd:d3:4a:be:8c:ed:00:27:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=70606421e9ebaf94175f3ab665ccd9952181963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:56:b1:cd:48:2a:22:87:9f:cd:48:9d:37:
5e:c4:0b:59:76:e5:50:65:77:21:7d:c5:c9:5d:02:
60:12:56:68:82:38:36:a8:5c:7d:61:90:b4:67:ec:
6f:a3:e5:92:79:af:c6:66:b1:60:72:4f:4c:97:e7:
17:f7:6c:99:0f:22:81:b1:5d:02:dc:f1:0b:eb:66:
34:0e:d8:67:ed:ef:18:d9:3f:d0:31:07:34:84:8a:
35:b6:c7:95:4b:1e:87:67:a6:20:dd:9f:c0:49:5e:
f9:54:c7:14:08:87:5f:26:19:6d:c0:46:71:74:7a:
2b:50:e1:73:8f:51:9f:ab:c0:00:58:f5:e4:98:1a:
03:80:f1:2b:b3:08:c0:e0:94:be:d9:69:99:e8:ca:
96:0e:b1:a5:bf:20:7a:98:89:97:af:10:be:14:51:
09:f8:74:a0:6e:9d:1f:16:4c:a9:a2:55:19:35:d3:
f1:c6:7d:17:bd:b5:99:8a:a7:18:ca:82:92:8f:7d:
fb:f7:df:08:c0:58:02:e9:e0:93:b5:fb:3b:67:6f:
fc:a3:af:93:be:4b:d2:14:ed:be:c5:6e:21:f9:33:
e2:28:fd:2f:8b:d0:9b:c6:dd:02:f5:5e:05:6d:2e:
eb:17:3f:8f:16:19:97:05:11:6e:7a:ff:13:95:31:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:64:21:E9:EB:AF:94:17:5F:3A:B6:65:CC:D9:95:21:81:96:3E
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:16:10:d2:80:4b:1f:5b:85:24:ca:10:b0:27:0b:31:24:14:
98:b0:da:fd:df:d5:0c:35:b1:bf:28:e6:d4:50:9c:3f:7d:bc:
02:ab:5a:78:87:4f:45:f3:fa:b2:20:67:06:f9:73:6b:01:d5:
c8:36:35:bf:e9:83:a3:7a:1a:43:e4:43:c2:41:9d:78:d2:b8:
54:f9:68:17:84:87:d8:77:d9:ff:33:2f:94:28:56:d8:f6:00:
a7:72:6f:a3:94:0d:c3:03:b0:34:fe:ea:30:64:ae:a6:4e:4a:
1e:f2:2b:f5:5c:fc:0f:64:d4:0b:ab:4f:2e:9f:29:c4:78:50:
c2:87:d4:7c:67:5e:44:b3:07:fc:41:66:dc:90:97:f0:48:90:
27:92:bb:fa:c2:38:ce:4c:61:11:c7:45:0e:ef:2d:6f:1a:e7:
27:44:d6:9b:cb:da:22:15:45:d1:19:be:c2:38:10:08:24:44:
eb:76:26:37:55:1d:32:7b:12:bb:f3:37:9d:d3:dc:05:48:da:
64:36:88:54:1f:96:b7:3c:d7:cd:4b:dc:d9:b9:e2:ba:1d:e8:
21:ba:1c:21:08:79:26:a4:9c:14:23:17:4f:9d:e3:ab:f9:17:
b5:a0:be:ba:a0:bb:d2:42:8f:2e:a8:0a:e7:1c:16:f4:27:51:
64:60:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:29 2025 by rpki-client