Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: KabhPJYWx2vlrQZxe/hRFilaYC8mybgmq9OPnO+26i0=
Subject key identifier: C0:41:A8:B9:FB:65:00:D4:CC:72:E2:9A:18:F0:9E:2B:9E:BA:C5:49
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019A270B2C8DC197743AEC5A6457BAAC1DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1703
Signing time: Mon 27 Oct 2025 19:00:34 +0000
Manifest this update: Mon 27 Oct 2025 19:00:34 +0000
Manifest next update: Tue 28 Oct 2025 19:00:34 +0000
Files and hashes: 1: KZIUSongntyb8cmh04ohuVf-RH4.roa (hash: EqZXG+hM0Nf7quHml742UmbfXBrPEdr6jmp61c5zxV4=)
2: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: GbJUcKX0GwYBWf+AUDnknF+Mbf+NBrxCGr28wp/npYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:2c:8d:c1:97:74:3a:ec:5a:64:57:ba:ac:1d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Oct 27 19:00:34 2025 GMT
Not After : Oct 28 19:00:34 2025 GMT
Subject: CN=c041a8b9fb6500d4cc72e29a18f09e2b9ebac549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:0f:d1:89:1b:f1:ca:a6:42:79:b8:4d:ef:
3f:6c:e2:8f:52:0c:be:08:da:8f:ab:a1:b8:21:f4:
02:24:a3:1c:0c:3f:4a:f7:e2:0d:ed:9b:87:95:2a:
d9:ba:c3:fe:e5:7e:e5:11:a5:44:02:5b:e6:83:ec:
83:eb:2e:a2:2f:20:58:db:9f:09:18:50:d7:a2:e8:
d4:ca:91:0f:c0:5e:2d:57:1c:55:c6:7c:30:b7:af:
54:22:8f:6e:fd:53:bb:6f:c2:0c:9f:c7:59:51:52:
f0:6a:88:8f:91:43:22:f8:d4:7d:c6:a9:c3:60:a9:
6c:9b:8f:79:9c:08:41:8a:61:fc:ea:9f:9a:66:53:
3b:80:11:11:9e:35:6d:20:7e:95:0f:58:ba:b2:90:
94:32:5e:2b:ce:49:a8:51:4d:f1:22:3e:34:75:8b:
bb:51:79:8a:5a:dc:2c:cb:36:23:94:da:64:f5:38:
17:dc:f7:b0:ba:2e:5f:07:e4:09:a7:aa:02:9f:58:
37:aa:d3:ab:0f:e7:7d:52:a1:5d:bd:02:8e:61:97:
1c:7d:72:4c:11:68:de:bd:ea:27:0e:85:2a:c1:be:
32:f5:ba:fd:54:51:fe:bf:c5:a9:24:06:6d:5f:2e:
f4:9d:9f:90:10:40:1a:8f:11:36:9f:c7:7a:19:c8:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:A8:B9:FB:65:00:D4:CC:72:E2:9A:18:F0:9E:2B:9E:BA:C5:49
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:4c:b1:64:ef:60:2b:30:d0:e3:6e:6a:5f:d9:04:05:ad:b4:
8f:0d:eb:ca:e1:42:7f:52:5d:a6:94:a0:3f:bf:21:9f:07:ee:
ad:50:a4:9d:27:34:3c:a1:ea:74:31:04:5a:24:b9:59:6a:09:
16:63:7b:e5:1a:68:05:4b:3d:ff:1a:de:52:08:9a:63:0a:69:
62:ae:77:ac:a5:cf:a6:96:b8:30:99:f4:80:2c:64:82:ad:88:
d6:c8:3d:5b:b8:a1:be:9b:7a:25:4b:6b:3c:56:2c:ea:a9:6d:
af:fd:37:b2:6e:fd:7f:bc:bb:00:a8:42:44:e6:e7:2d:60:e1:
9b:8f:5a:0d:01:25:db:ca:10:89:3c:c3:1c:08:64:2a:83:c9:
4d:76:b9:cb:e6:c9:5e:9a:f6:30:d2:d8:4f:c5:81:d5:e8:52:
9b:8d:fc:1a:8a:fa:87:9e:91:36:f5:af:2a:a0:7f:05:c5:e7:
03:f7:c7:32:ba:79:46:1e:2b:77:7a:54:e9:5d:95:06:5e:b1:
2e:46:19:ec:87:28:99:6b:b7:04:d5:06:bd:ac:c8:dd:7b:7d:
57:f0:14:dd:ac:1e:de:11:c2:2c:85:6b:ff:dd:b3:1f:da:8e:
3e:56:e7:1f:42:5d:6f:9b:7d:6a:d4:3a:ad:ce:c1:b8:5e:21:
a8:51:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:48:34 2025 by rpki-client