Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: JNv0pQikF3vxKunlxXkWD4ZnczHcolF0A28O3kBAtWE=
Subject key identifier: 9A:95:4D:05:5F:57:64:8C:39:30:F1:BF:A9:52:F5:A5:24:19:3F:C5
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019A047EC3EEB4E6C41759F97D6F667705A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1567
Signing time: Tue 21 Oct 2025 02:00:07 +0000
Manifest this update: Tue 21 Oct 2025 02:00:07 +0000
Manifest next update: Wed 22 Oct 2025 02:00:07 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: SxMkPc4987JSQ8Dp+r+o9nAE9SE7E8NCwrVj0P2Mjzg=)
2: D7sSJq2EzuylXPTSVOWPxBm3Ho8.roa (hash: gmpCwmfjITdv8gtFNL4Zn9iouUW+u1PcPnCsYBgoNzM=)
3: efe5amh4jlMydhivq3OF5qbDCpI.roa (hash: 6iw2gnDcZP6ZZJX73WBgPOkeEQEpMVtjxP8058iyjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7e:c3:ee:b4:e6:c4:17:59:f9:7d:6f:66:77:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Oct 21 02:00:07 2025 GMT
Not After : Oct 22 02:00:07 2025 GMT
Subject: CN=9a954d055f57648c3930f1bfa952f5a524193fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:11:ba:01:bb:e4:16:3d:96:ee:db:ca:13:
75:b7:6f:bc:37:42:08:36:d0:98:9a:40:f1:af:70:
0e:30:ff:c9:f2:7d:4d:2d:ce:9f:d5:16:d4:40:27:
6e:84:00:d8:c4:49:5e:27:1b:cf:9e:7a:de:58:c5:
a1:36:d3:4b:e4:3e:ae:68:ad:08:2a:77:33:5c:e0:
9c:57:bf:d0:08:92:db:b7:a2:82:d4:21:d4:e2:5f:
5f:54:6d:dd:80:48:e4:d3:fe:3e:84:40:dd:eb:d4:
8f:a4:8e:cb:2b:fe:34:6c:f1:04:3c:7d:c2:ea:ad:
ef:bf:f3:bd:23:51:e3:a1:6d:ca:68:72:ec:e5:c4:
1f:52:f2:c3:93:bd:1b:c4:ba:a4:39:a5:12:96:e9:
a4:b6:83:44:ad:5c:a5:ce:9f:19:5e:dd:e4:8c:38:
7b:99:49:bb:97:ba:85:0e:72:e1:cd:63:84:1a:a2:
b3:0f:72:2e:91:a7:6b:d3:1d:09:4d:81:cf:21:14:
1f:8e:79:22:62:ee:f4:cb:22:6f:7b:47:46:12:e1:
f7:be:88:59:cb:44:f2:97:42:fd:45:e9:8d:90:48:
45:5a:b6:e9:26:96:4f:29:db:90:56:08:d9:bc:8b:
3d:fa:bf:cc:88:e7:bd:03:5d:68:8b:27:87:58:7d:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:4D:05:5F:57:64:8C:39:30:F1:BF:A9:52:F5:A5:24:19:3F:C5
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:58:aa:1d:97:d0:05:d3:18:af:0b:90:c3:99:58:79:bb:
86:7b:11:db:47:6f:4d:f6:2e:e0:3c:f4:17:3c:fe:8f:6a:4d:
04:17:8e:f5:f6:a4:cd:c8:77:bf:4d:65:01:5a:f2:0c:83:c7:
8a:54:83:53:2e:8d:9a:e8:00:95:b3:9b:66:59:ae:b4:e0:cf:
90:96:51:84:e9:16:ef:83:71:64:b4:55:36:aa:72:dd:e4:69:
82:4c:4f:95:f7:7e:f4:04:99:34:4d:22:75:37:28:bd:5e:42:
e7:da:87:87:ea:ef:e1:43:9a:ff:da:e5:1b:ab:58:5e:b7:e6:
f2:ae:8e:0a:b3:0e:3d:e9:04:d8:87:0e:bc:a8:a0:59:66:71:
55:07:5d:ba:1f:aa:d8:13:ca:b5:65:f9:b3:37:5e:6e:ee:d3:
36:86:53:c2:ee:9b:7c:6d:e4:c9:df:3d:f1:17:62:09:37:aa:
f3:ba:f1:05:ea:9f:66:a4:b6:40:e1:42:d3:b7:7c:37:d1:74:
2f:a5:de:63:e4:33:4e:be:c5:58:92:a4:c6:f0:1d:5c:de:a0:
d5:bd:39:f5:31:c0:22:1c:7f:64:cd:2d:52:9b:d8:69:c5:a4:
d5:81:78:c5:7d:77:1f:63:14:6c:cd:9a:f9:26:95:3d:00:50:
ca:34:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:39:35 2025 by rpki-client