Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: cgdbslMKLDAcsqUJALsfIxYN1vCtL59rjwh3zEMmx8M=
Subject key identifier: C5:59:4E:0B:E6:52:A0:DD:D8:44:87:0A:62:75:1A:96:1C:9A:0C:CD
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 019A5187F4B679D1A68FBAF149CE4C4E6287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 0266
Signing time: Wed 05 Nov 2025 01:00:55 +0000
Manifest this update: Wed 05 Nov 2025 01:00:55 +0000
Manifest next update: Thu 06 Nov 2025 01:00:55 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: dQyb6LlJUPne4JFcupg+CdmkiRNAoLK6S04/od9RfXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f4:b6:79:d1:a6:8f:ba:f1:49:ce:4c:4e:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Nov 5 01:00:55 2025 GMT
Not After : Nov 6 01:00:55 2025 GMT
Subject: CN=c5594e0be652a0ddd844870a62751a961c9a0ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:6a:73:6f:e5:5e:50:10:a3:1a:e0:26:87:
00:1d:75:d7:ef:c9:bd:2e:79:ac:6c:21:d1:bb:6b:
15:53:81:1a:2b:48:8c:d8:24:f0:e2:a3:e0:5c:2e:
c0:ec:d5:6e:e7:fb:53:ca:75:c7:a7:0e:0f:c8:3b:
01:72:14:e2:16:dc:fb:89:c6:08:a1:70:f0:b8:49:
ec:fb:4c:81:48:10:14:35:78:4f:24:d7:d5:70:bf:
f8:ac:25:da:34:52:3c:b1:75:27:44:77:0d:3a:9c:
d9:bf:30:83:a6:9e:bf:4d:a2:e9:df:6b:cd:ad:a4:
a8:6d:25:24:0a:57:c2:88:c8:55:ea:dc:2f:18:b8:
55:c2:66:be:17:6b:4f:eb:62:39:af:98:c0:45:bf:
33:51:3f:a5:47:c1:fe:cf:c9:4f:e2:b2:ae:23:13:
e9:7b:3d:62:ca:4b:68:3d:9c:92:40:cf:86:3a:e4:
08:73:75:ad:5a:87:2e:8b:56:84:67:e9:f3:37:52:
00:40:4f:c8:eb:2b:26:71:79:6b:5c:29:0c:c1:e7:
06:a7:dc:1a:a5:23:1f:68:d4:59:ee:76:de:65:4a:
c5:e8:a7:4e:46:62:8e:fb:27:cd:b5:78:ad:46:ee:
5d:7c:bc:99:8c:9a:1a:fc:bb:3d:24:01:4f:60:80:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:4E:0B:E6:52:A0:DD:D8:44:87:0A:62:75:1A:96:1C:9A:0C:CD
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:f2:1d:8f:d6:b6:79:03:b1:73:09:8f:1a:dc:d6:c6:25:9d:
08:98:87:80:7f:04:30:4e:e2:4d:cf:cb:fe:df:7d:2e:7e:06:
21:6e:02:90:66:ca:0a:5e:3e:87:6f:09:c1:b0:c6:5a:ae:ae:
63:a9:f1:75:8d:bd:f8:4b:fe:af:ec:34:81:34:47:01:47:7d:
f9:78:6f:c9:a9:17:43:4f:98:11:60:04:11:4f:cd:c8:26:ae:
54:13:e5:8c:59:3f:bd:3f:7b:07:05:0f:e7:c5:88:93:4a:6d:
88:91:86:e1:a0:f0:98:71:43:e5:50:3f:c7:87:89:7c:d0:17:
9b:80:7d:7a:4a:1f:f7:38:73:c6:00:a6:46:e5:c9:75:a8:5c:
b8:95:fe:67:29:5c:be:b2:45:00:58:cb:5c:18:7b:28:61:d8:
2d:fa:9d:b6:00:14:f5:da:09:93:8a:a1:7d:7b:32:b5:26:13:
5f:0f:12:f1:05:15:1c:7e:85:0a:d2:3e:92:c8:af:3d:34:9d:
40:3d:0e:10:41:29:39:98:d9:77:fc:88:bb:1e:3b:2c:ce:32:
62:df:71:5d:a6:e8:23:51:e5:9e:fa:c9:24:37:e9:46:20:81:
0a:7b:37:f2:b9:33:30:26:04:50:a0:fe:32:c6:10:e8:ec:63:
6a:35:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:13:16 2025 by rpki-client