Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: NgnTAmDZMTGzEtEDgHgUKRfRf7f5766FEx4b+bzydMg=
Subject key identifier: 06:F0:94:D4:2D:4C:09:D1:8D:22:22:75:E6:83:15:1C:1C:2C:EF:0E
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 019A4EF41F14B2A2ED5DDE1FABE4DBB098D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 13D3
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: AdFRpZXP/lWXMAIzf1jQiUI6fvw3gIzNdUSVKtjGaAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1f:14:b2:a2:ed:5d:de:1f:ab:e4:db:b0:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=06f094d42d4c09d18d222275e683151c1c2cef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:a6:7e:5a:6d:66:b0:99:62:79:d0:4e:a1:
6b:74:18:31:15:84:e3:3b:8a:f8:f3:86:73:ae:7c:
22:63:71:df:f8:7d:09:c8:29:1b:0b:7a:25:c1:1a:
45:d1:2d:b8:4e:af:3c:ba:7d:1f:a2:2d:15:ea:27:
a6:1e:a5:cf:e6:42:fc:7e:28:56:31:1b:c4:a4:81:
1b:1b:70:10:e9:39:a1:8d:ac:bd:77:6f:14:d7:25:
d7:0b:2e:34:f2:fd:ff:8d:45:36:55:44:2c:e4:2a:
0f:47:5c:fc:85:a3:45:e1:91:7a:51:33:42:a0:e1:
b7:a7:9a:ab:e1:3c:97:e7:4c:ca:f8:62:af:50:f9:
da:13:56:99:29:e0:23:e6:b9:b8:86:ce:97:1e:6e:
ac:7b:33:6d:61:aa:52:1a:9e:46:fc:e9:56:31:50:
c9:a7:8b:36:26:6f:5e:aa:be:0e:30:df:ea:4e:b4:
6d:da:d6:4f:2b:71:fc:cf:20:85:b0:7c:5e:55:7a:
8c:59:2a:60:6b:c7:3f:cb:e9:f2:36:09:97:ab:a2:
6b:25:95:e7:8e:25:af:3b:6b:55:3a:3d:33:4c:29:
d2:27:47:ff:3e:ec:6e:1a:80:8b:c2:21:0a:a1:4b:
a4:68:a4:e9:27:49:91:f1:d0:44:4a:f9:3e:5c:0a:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:94:D4:2D:4C:09:D1:8D:22:22:75:E6:83:15:1C:1C:2C:EF:0E
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:15:d4:14:4b:c3:04:84:06:3e:27:2b:be:a7:4d:36:d7:
80:d8:6d:59:23:42:06:70:84:7d:e3:2f:44:43:c2:e9:e7:27:
54:1c:91:80:30:88:aa:56:7c:14:1e:b2:2d:1a:d0:be:a8:c5:
8e:14:2d:3f:5d:f6:d7:8b:71:13:7b:5b:21:6a:de:88:67:94:
ca:ba:35:bd:b2:32:77:d2:bf:9e:92:48:72:7f:c2:4f:8c:46:
99:8f:cd:41:35:15:8d:b5:ba:f2:be:ed:6e:43:d9:1c:ce:89:
a9:5f:9b:18:48:df:e6:f0:30:7b:be:3d:69:21:97:a7:3a:7e:
23:96:14:f7:6f:bc:bc:ae:5c:32:22:58:e2:d8:9c:71:7b:c4:
2e:0e:c9:cb:18:fb:17:4e:38:6b:05:2d:d1:87:ce:1e:d8:9a:
28:e7:d5:d5:a0:3e:da:e3:5e:52:7d:91:80:48:e6:66:09:09:
7e:9d:65:0a:6d:1e:99:97:cc:cc:71:3f:a5:4c:93:9a:34:e1:
d1:eb:29:4f:6a:27:97:c5:86:38:1c:55:2b:14:47:a2:1e:23:
1b:f9:ea:72:90:1a:4c:70:22:09:a9:b0:b8:c5:ff:d6:81:e6:
d5:e8:43:95:82:ff:a1:7d:43:39:38:00:c2:94:8b:3a:0c:d5:
fd:53:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:39 2025 by rpki-client