Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: LtBgcHg0a1iS/jaFYKn8HOSIVREiFoe3/41ZU2vxyhQ=
Subject key identifier: B0:E8:69:14:94:A7:A6:C5:12:D3:68:18:AD:E5:E8:E0:4C:29:FC:EA
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 019A522CB85FCF51D5B2C31BD9955314A33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 1108
Signing time: Wed 05 Nov 2025 04:00:53 +0000
Manifest this update: Wed 05 Nov 2025 04:00:53 +0000
Manifest next update: Thu 06 Nov 2025 04:00:53 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: fk7zZ0DTmbE3NrummhsjHbNa+2NEVBbzPqbFOdC/ovM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b8:5f:cf:51:d5:b2:c3:1b:d9:95:53:14:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Nov 5 04:00:53 2025 GMT
Not After : Nov 6 04:00:53 2025 GMT
Subject: CN=b0e8691494a7a6c512d36818ade5e8e04c29fcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:f0:83:db:e0:97:07:21:e8:c5:a9:f2:68:
6a:ad:31:4c:a8:67:e0:85:4a:d5:4e:1c:d3:f8:2c:
cf:35:7a:da:bb:10:96:35:57:bd:27:44:76:96:5d:
8d:40:fc:31:e5:b9:cb:c2:24:3c:d6:f2:6f:5c:48:
9b:77:ce:9f:70:56:8e:3e:a2:88:18:b3:90:11:14:
d7:19:09:c4:58:3b:59:3b:b4:cb:cc:9d:d7:a5:32:
69:31:2a:62:7c:7e:b2:b6:e8:2e:70:71:31:9e:78:
48:65:60:36:dc:49:25:ef:14:df:e7:14:f6:00:07:
cd:e7:a9:a5:04:b9:d8:bc:46:0c:60:c2:fa:7e:97:
11:6a:95:04:67:33:fc:4d:eb:b3:8f:e7:e1:3a:21:
0e:1c:83:be:9b:65:53:30:f6:60:51:96:9b:14:cc:
64:7d:de:8f:73:86:cd:80:c4:49:96:94:fb:06:20:
e6:06:1a:41:2d:af:25:4e:f0:a8:ab:48:45:78:f7:
16:1a:9a:9c:39:40:cd:b7:ba:da:0f:d4:7b:79:ae:
0b:30:ef:90:0c:d4:ed:d3:9d:ba:50:9f:d9:f9:1b:
ab:9f:55:30:5f:c6:7e:44:60:6a:c4:67:75:82:d8:
36:02:59:6b:33:38:11:75:87:68:8a:71:d2:e2:2e:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:69:14:94:A7:A6:C5:12:D3:68:18:AD:E5:E8:E0:4C:29:FC:EA
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:37:3a:2a:09:8d:47:b7:84:8d:7b:36:4b:e6:25:67:9a:9e:
e4:b6:b1:42:fc:65:32:ae:ba:72:06:63:35:0b:62:67:0e:be:
2d:d6:01:60:c2:9c:92:3c:a5:7c:2d:08:6b:b9:93:69:41:9a:
92:4a:b3:b3:fa:2b:3f:39:fb:63:ed:98:3b:09:97:88:3a:c4:
bd:34:d0:bb:cb:d5:e8:81:43:5e:b8:12:21:6b:e9:a2:3d:20:
0d:8a:08:1e:3b:aa:45:b1:fc:8c:21:e1:ca:88:ac:43:ad:1e:
4f:55:9a:b2:ba:ff:5d:55:c1:2b:fe:4e:fe:15:f9:13:aa:9d:
a0:a3:90:26:2e:79:74:97:6d:96:c1:97:6b:03:c8:96:62:13:
3f:b9:a0:2f:a3:04:28:97:a4:5e:28:4a:22:48:32:24:de:f9:
a1:6f:28:98:9b:fa:b0:86:1f:ac:60:5e:26:a9:58:65:98:5c:
6c:a7:3b:69:80:fa:8a:ac:8a:ec:e1:bc:9a:35:a5:39:d8:79:
b4:51:0c:0b:55:22:90:88:eb:10:6c:97:de:7f:05:7e:2c:3b:
71:8e:b2:20:3c:99:ba:89:41:72:9c:df:4b:28:4f:23:d7:3b:
f7:c8:61:16:ca:7e:dc:31:73:9f:bf:a9:12:58:c0:66:cd:83:
9f:67:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:21:19 2025 by rpki-client