Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File: jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier: TUqJjqy8pt92Z76cljEEVkiBIYClo/Za1IwGR7Lqa+U=
Subject key identifier: 37:66:B2:61:00:1E:67:72:9C:1E:2E:FB:83:42:12:25:72:E7:93:CE
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer: /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial: 019A711367EB8BBC8C46E4AA27F5AD817C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number: 044B
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: 8K811M4eEGHcmM9wMckL2krfQg4wAIM+U3x61dl6IL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:67:eb:8b:bc:8c:46:e4:aa:27:f5:ad:81:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=3766b261001e67729c1e2efb8342122572e793ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:4f:32:2c:9d:78:04:76:23:32:fb:4d:41:
f4:60:a7:cf:2f:5c:4c:e0:61:6e:9f:1a:d5:59:ff:
d5:37:11:05:c9:cc:f4:31:95:c8:ce:f8:df:e4:16:
a0:c0:a1:c5:b4:8a:a4:0f:ce:84:de:67:61:1d:98:
f2:0f:14:33:75:19:7d:33:49:54:d6:67:4a:e1:e9:
04:30:e5:11:1b:90:4f:74:23:b4:b2:ad:d2:f2:a9:
01:df:22:5e:4d:f1:cb:2b:ce:16:74:7e:10:d3:29:
f4:c9:4d:75:8d:a2:a5:2c:44:67:3b:2e:bc:a4:6f:
01:c3:d5:ea:be:ad:7e:1c:82:53:dd:b0:66:0e:35:
9c:8f:49:9a:9f:e2:f4:d6:b9:12:e4:02:9e:62:22:
c3:dc:c6:36:ed:ab:41:0e:3d:ba:c1:c3:b3:57:07:
2b:b0:1a:2a:3c:db:73:c3:2e:41:58:8c:75:0d:44:
39:07:40:47:9e:b7:5f:08:f6:9d:af:cc:33:e5:b1:
5e:80:b9:ed:1b:2b:c2:76:cd:c7:0a:51:de:d6:6c:
18:7a:3c:65:51:7d:0a:17:2f:ae:e4:7a:8a:ec:8d:
c6:3b:50:18:f6:80:71:95:ce:b2:f3:45:86:0c:98:
eb:05:32:93:dc:34:28:c8:ec:ec:c4:2f:20:e7:af:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:B2:61:00:1E:67:72:9C:1E:2E:FB:83:42:12:25:72:E7:93:CE
X509v3 Authority Key Identifier:
keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:38:ad:f5:f7:b6:b5:50:62:67:fe:65:20:b9:ce:c2:12:8b:
19:03:58:a4:1c:7d:a7:89:3c:56:e4:62:27:08:ed:43:33:c9:
10:a5:68:a4:6b:4b:68:83:1f:90:bd:e2:aa:01:5e:55:ec:80:
ce:64:4c:84:1b:f5:cf:b8:86:62:aa:e4:24:14:24:0f:f7:6d:
cc:ad:22:9b:1d:3a:ca:c1:14:e7:66:71:1f:4c:63:a5:86:d2:
a1:68:44:5d:19:8d:c4:44:d4:c4:4a:eb:6b:9c:93:e0:f5:21:
27:b0:ec:69:bb:3b:e9:ef:2e:78:63:ef:48:cf:db:db:38:ed:
5e:72:90:e9:f9:5a:60:c5:23:ad:77:0a:d0:43:47:4f:71:81:
d4:66:5c:c9:d4:69:82:ef:54:e8:28:95:50:0e:d0:81:6e:ee:
32:ce:4e:99:28:67:f5:0b:8a:2e:87:c5:ce:ab:9f:d6:8f:69:
f8:ad:f0:6a:03:49:7d:1c:93:77:fe:f6:c7:65:59:ec:1a:d0:
a7:c2:6c:21:83:1e:01:df:0a:42:d7:14:84:bd:39:38:fe:3a:
ff:46:b7:b8:b1:6e:31:86:26:d2:78:9d:d7:b8:1c:d8:01:c9:
82:0c:ea:ad:20:07:72:2a:80:33:b0:02:f3:35:90:ee:5d:64:
ee:8c:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:09 2025 by rpki-client