Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: LUvbYXIyQDT7/TEbGEWolAbn/yDDWeWn5K2OMjss3Rs=
Subject key identifier: D3:17:B1:15:17:77:73:69:D5:27:93:6A:B6:B5:21:10:EA:F9:C6:83
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019A72CA4FE6D2AB446F9EBD5644E5820BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 12:00:52 +0000
Manifest this update: Tue 11 Nov 2025 12:00:52 +0000
Manifest next update: Wed 12 Nov 2025 12:00:52 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: OzBihEY6yRfQrXQHRV7QrxMWHR1nJNHwr8/qraOL7bw=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4f:e6:d2:ab:44:6f:9e:bd:56:44:e5:82:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Nov 11 12:00:52 2025 GMT
Not After : Nov 12 12:00:52 2025 GMT
Subject: CN=d317b11517777369d527936ab6b52110eaf9c683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:d5:8e:a5:99:c4:6b:9f:8b:41:fd:c9:ae:
cb:82:8a:36:b9:39:b2:ee:6e:92:cc:16:7d:8c:97:
6d:e0:6b:95:58:5a:64:6f:8e:cf:f6:25:21:71:1a:
07:eb:a4:34:04:e6:f3:57:7c:a3:8f:68:bb:7d:a7:
c5:2c:39:f2:88:28:ec:84:db:18:17:e5:a3:52:e3:
b9:9a:52:95:4a:22:29:0c:56:d1:90:39:6a:a4:1d:
62:d7:2c:17:87:75:b0:9c:14:c4:27:bf:55:6e:89:
16:76:fc:c3:c6:90:78:62:b9:6e:62:0f:65:86:89:
0a:bc:cf:23:75:cc:29:50:6d:c5:cf:f3:e9:21:94:
37:5e:1e:31:a9:10:2c:cd:34:e0:f7:0f:cb:8e:a4:
04:b8:af:79:6e:02:29:5f:77:6d:52:48:00:18:1f:
c6:fa:9a:c3:69:9c:f3:88:6a:d3:8f:54:22:e4:96:
7a:5f:a7:a0:e8:a7:73:76:ec:b2:ea:2f:cd:b9:da:
37:d5:48:0a:3d:20:5a:25:cd:5c:56:11:6a:f6:b7:
b4:29:ee:a7:c8:c8:c6:ce:32:a9:60:53:71:7c:e6:
2c:f0:ef:44:f1:58:b8:12:7c:8e:46:0e:7e:48:a1:
a9:5f:d7:3c:3b:c4:bb:23:2b:3d:53:b5:2e:f9:7b:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:B1:15:17:77:73:69:D5:27:93:6A:B6:B5:21:10:EA:F9:C6:83
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:36:f8:a1:ac:29:4b:27:55:bb:58:a2:74:ac:cd:aa:b1:
a1:8d:fc:5b:d9:44:cc:1c:3e:21:46:7a:e5:0f:3a:4a:68:34:
a0:fa:1e:e3:ad:72:57:49:a6:5a:6b:a4:06:61:14:47:3b:fa:
e0:e0:ff:e0:3e:59:90:2e:b8:c9:cd:9e:75:21:a4:e9:1a:c1:
c8:f4:62:49:c6:97:04:7b:e7:30:73:86:28:b8:8a:9d:73:d5:
0d:4b:ce:fe:e8:e3:a3:ef:27:5b:d6:eb:93:ad:38:c1:fb:b7:
53:ed:63:89:35:cc:41:a5:f6:8b:ea:66:e7:45:77:46:32:af:
7a:40:81:fe:5d:30:4e:d2:1f:23:67:18:b7:d8:b4:62:c0:7e:
57:6b:8a:9d:39:20:f5:84:88:ba:c7:42:38:f3:49:a7:2d:31:
67:7c:c6:e0:1e:ef:e9:0f:df:94:30:94:d6:32:23:c1:58:46:
1b:e3:b7:a1:3a:ef:ba:7e:0b:23:37:a2:af:c0:32:78:81:a1:
9a:16:27:e0:33:42:3c:53:d7:16:92:5b:aa:39:78:b0:3d:2e:
05:79:4c:43:a6:01:54:6a:0c:58:ef:99:e5:db:28:db:45:6c:
90:99:71:5f:4b:ab:49:16:00:5a:88:77:0a:01:59:59:5e:4b:
8c:48:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:34 2025 by rpki-client