Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier: sFCkAwBYsiyG4j7l3IH4cm6HU9YX5virxeUz8FzPWko=
Subject key identifier: AA:60:F5:29:4F:40:A2:29:2B:0C:04:32:C2:16:D0:AE:9B:C3:CE:DB
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial: 019A5299EEA6C061B1256AD891831AFAF7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number: 1654
Signing time: Wed 05 Nov 2025 06:00:11 +0000
Manifest this update: Wed 05 Nov 2025 06:00:11 +0000
Manifest next update: Thu 06 Nov 2025 06:00:11 +0000
Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=)
2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: xbgf4kEzgTnvhABFvQ68e10Ir4C4rRjQkRTIhdFqPAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:ee:a6:c0:61:b1:25:6a:d8:91:83:1a:fa:f7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Validity
Not Before: Nov 5 06:00:11 2025 GMT
Not After : Nov 6 06:00:11 2025 GMT
Subject: CN=aa60f5294f40a2292b0c0432c216d0ae9bc3cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:4f:30:d5:e4:c5:72:66:0c:98:b5:76:3e:
74:5f:06:a6:f1:6d:c1:0c:52:13:15:c1:cb:43:6f:
23:ef:79:89:ab:54:00:3c:97:b9:6b:df:2b:0f:27:
e9:25:f6:46:34:71:26:40:ec:ea:2d:60:40:88:24:
a5:e4:73:0c:12:7d:7b:de:83:53:84:5c:cf:55:34:
c8:98:dd:bf:96:61:dd:e7:58:d3:0d:39:6e:68:31:
dc:76:59:0d:a3:a9:e9:30:ec:c4:75:78:cb:41:71:
92:b9:e7:e2:17:90:1e:c9:4b:78:3b:95:7e:64:8c:
fc:a3:cc:22:8c:03:f4:2b:ec:89:34:2f:35:4c:3c:
1b:12:3e:5e:b6:71:31:7b:e3:1c:fb:e0:70:d4:ab:
2e:51:8f:d6:ec:29:d2:5e:1b:48:9e:d5:d5:34:f5:
b8:09:9d:5e:b8:d6:19:14:0e:1e:f5:b4:52:10:56:
e5:5d:be:7d:4d:61:44:2a:7b:31:41:fa:88:9c:55:
fc:64:c4:0c:52:25:9f:bb:cb:07:29:86:e3:cd:04:
4a:f1:df:dc:e0:f5:48:6f:e6:21:a1:6b:0f:51:0d:
72:82:f6:c0:56:4c:36:92:60:9f:fb:d8:84:bb:ba:
f7:f7:3d:b5:91:74:53:d9:38:69:c0:44:07:e5:28:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:F5:29:4F:40:A2:29:2B:0C:04:32:C2:16:D0:AE:9B:C3:CE:DB
X509v3 Authority Key Identifier:
keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f9:2d:30:99:ea:15:af:f0:3d:85:92:b0:48:80:4c:04:d4:
92:1a:9e:e5:18:35:1f:4a:d2:3d:65:88:50:6f:b2:0d:38:e7:
1c:c9:c4:24:49:6d:5f:c7:3f:1b:07:3f:bb:0e:be:f1:67:1e:
a7:ef:5c:94:d0:e8:0d:d9:94:62:14:88:47:0d:ce:f2:f1:47:
5e:4f:7d:ea:da:cf:9a:bc:82:5b:3e:fd:02:d4:86:15:96:51:
a0:64:fd:be:ac:fd:84:e1:9a:58:19:8d:6a:90:a5:66:77:bf:
3c:90:e0:d8:1f:65:78:3f:ba:00:2c:84:4f:71:42:82:fb:a2:
bc:10:f8:d0:54:d6:30:6b:cb:64:fc:8c:81:89:4a:2d:4e:c9:
0c:34:75:ca:25:83:45:76:76:c9:2d:77:7e:8e:4a:3c:96:d9:
7e:85:c9:b7:27:95:50:35:69:18:ac:84:2e:5e:e9:e2:d0:92:
7a:44:5c:4c:36:d4:35:3d:b7:19:66:f4:e2:a5:b0:57:6e:28:
78:8b:79:c1:33:fd:81:46:41:d5:34:b2:2c:21:07:76:28:81:
36:14:21:43:dd:1c:49:f8:db:a3:f7:75:cc:d3:c8:cb:3a:64:
32:cd:6f:9d:7c:2e:3f:82:b1:a7:cb:f5:50:b4:e2:83:f2:b8:
72:b5:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:50 2025 by rpki-client