Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: iZM5+9RcIqcTqoOnzUZzR5TreXyGvlYfCbMgKUR6nVs=
Subject key identifier: FC:A6:8E:7E:AA:16:73:1F:0B:FB:07:6D:89:1E:AF:99:78:16:9E:77
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019A729390546A596DDC363A3857C036232B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: 4I63SpfTUtlJIoVCAyrk3tlJ5R286YJ/F3lTERaDTow=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:90:54:6a:59:6d:dc:36:3a:38:57:c0:36:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=fca68e7eaa16731f0bfb076d891eaf9978169e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:cd:77:31:a1:68:ce:8a:d4:35:3b:20:36:
63:ad:4c:38:fd:bd:4c:16:55:11:9e:ad:55:a3:aa:
d2:2d:46:38:b4:bf:c1:c7:d9:b2:e7:4d:60:b0:0d:
b8:37:3f:ea:e5:4d:2e:bf:b0:e1:29:83:5d:65:b1:
f4:84:a5:26:0a:42:83:a4:90:c8:b8:09:6b:0b:56:
c8:f8:14:19:48:06:c3:3f:07:8c:f7:4e:b7:fc:6a:
c8:74:7a:81:e8:95:a8:22:6c:2b:c4:34:03:a3:e7:
59:64:7a:cc:0b:61:ff:94:ad:2d:27:8f:6f:56:db:
70:89:e0:91:c4:34:f5:ae:6d:d8:c4:8a:26:8f:5b:
50:fe:60:e0:b2:ea:2f:67:3b:e1:23:c1:a4:75:a2:
82:1e:cb:37:9e:ce:e4:84:ec:48:c3:16:23:88:a4:
d4:f9:75:28:88:96:70:d5:f6:3d:b3:15:08:8f:58:
ae:d4:56:5e:be:01:91:79:c0:46:64:fc:d8:77:f4:
7e:9c:e6:ab:1f:b8:f6:8f:22:50:ae:d9:4b:85:34:
bb:47:b2:cc:00:ff:8f:82:45:f0:04:7a:e8:45:96:
a4:17:ce:0c:07:87:a6:35:f8:02:93:3b:42:dd:c8:
55:4d:13:9e:7f:fb:13:b4:2e:b5:73:22:bf:26:89:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:8E:7E:AA:16:73:1F:0B:FB:07:6D:89:1E:AF:99:78:16:9E:77
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b7:4d:68:7e:8e:eb:86:1b:86:c7:ae:44:c8:dc:f8:05:00:
7c:09:27:85:b0:55:3d:e2:77:cd:aa:9b:c8:e9:e5:3e:cf:3b:
a0:f4:0d:85:49:1b:62:27:1c:fe:f6:44:16:97:87:27:b5:4b:
ae:67:69:8a:1a:6d:75:e7:ed:4d:5f:48:09:66:f6:bb:3e:49:
19:71:70:a8:97:19:cb:42:2f:44:6c:62:fb:8e:00:03:d4:a7:
42:1e:b3:a0:93:00:63:bc:1f:1a:c9:af:60:3d:7a:fa:ee:be:
a8:d5:59:63:68:ce:48:c7:53:d7:5a:df:cf:b5:04:23:8c:44:
36:3b:3c:b1:ed:70:ce:b5:39:a4:4b:31:e9:4a:8e:60:19:ce:
15:96:4f:77:ad:63:40:4c:7b:de:e1:de:ec:6b:8a:06:34:ad:
87:e0:6d:be:25:91:7b:ed:18:19:00:dc:3e:d3:fb:ac:3b:f3:
4b:63:02:00:cb:fb:6c:f2:34:dd:99:26:12:fe:61:77:d9:3c:
56:7e:43:22:24:bd:b6:1e:36:e2:f5:24:b7:49:fc:e1:11:83:
2d:a0:df:51:04:4c:9c:fc:c3:9a:b4:28:ca:8e:ab:d9:5f:9a:
b2:fa:da:86:bd:43:78:b1:f2:eb:6e:35:34:53:41:94:1f:d1:
36:ba:cc:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5BUallt3DY6OFfANiMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0
YzNiMDgwHhcNMjUxMTExMTEwMTA0WhcNMjUxMTEyMTEwMTA0WjAzMTEwLwYDVQQD
EyhmY2E2OGU3ZWFhMTY3MzFmMGJmYjA3NmQ4OTFlYWY5OTc4MTY5ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUnNdzGhaM6K1DU7IDZjrUw4/b1M
FlURnq1Vo6rSLUY4tL/Bx9my501gsA24Nz/q5U0uv7DhKYNdZbH0hKUmCkKDpJDI
uAlrC1bI+BQZSAbDPweM9063/GrIdHqB6JWoImwrxDQDo+dZZHrMC2H/lK0tJ49v
VttwieCRxDT1rm3YxIomj1tQ/mDgsuovZzvhI8GkdaKCHss3ns7khOxIwxYjiKTU
+XUoiJZw1fY9sxUIj1iu1FZevgGRecBGZPzYd/R+nOarH7j2jyJQrtlLhTS7R7LM
AP+PgkXwBHroRZakF84MB4emNfgCkztC3chVTROef/sTtC61cyK/JolZuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPymjn6qFnMfC/sHbYker5l4Fp53MB8GA1UdIwQY
MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt
ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj
LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArdNaH6O
64YbhseuRMjc+AUAfAknhbBVPeJ3zaqbyOnlPs87oPQNhUkbYicc/vZEFpeHJ7VL
rmdpihptdeftTV9ICWb2uz5JGXFwqJcZy0IvRGxi+44AA9SnQh6zoJMAY7wfGsmv
YD16+u6+qNVZY2jOSMdT11rfz7UEI4xENjs8se1wzrU5pEsx6UqOYBnOFZZPd61j
QEx73uHe7GuKBjSth+BtviWRe+0YGQDcPtP7rDvzS2MCAMv7bPI03ZkmEv5hd9k8
Vn5DIiS9th424vUkt0n84RGDLaDfUQRMnPzDmrQoyo6r2V+asvrahr1DeLHy6241
NFNBlB/RNrrMhA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:32 2025 by rpki-client