Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: y5g1xajukrqzNXrPqj6sblwOgYr1IRRWdYZZU+jDh1E=
Subject key identifier: 16:D3:13:6C:7F:D6:AE:20:92:2A:32:F3:AA:B2:E0:49:73:CE:6F:93
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 019A72CA48058923A399C09976CEED7638E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0408
Signing time: Tue 11 Nov 2025 12:00:50 +0000
Manifest this update: Tue 11 Nov 2025 12:00:50 +0000
Manifest next update: Wed 12 Nov 2025 12:00:50 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: wW0oVNtYZzoq8LFDwPH/SH0yc3hz2hpyw8/Jg1g3C/4=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:48:05:89:23:a3:99:c0:99:76:ce:ed:76:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Nov 11 12:00:50 2025 GMT
Not After : Nov 12 12:00:50 2025 GMT
Subject: CN=16d3136c7fd6ae20922a32f3aab2e04973ce6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:ff:de:df:3a:50:47:21:59:1b:3e:68:92:
98:86:80:e5:06:7a:6d:ac:96:9f:3c:7e:8f:b6:dc:
f1:91:b3:44:54:ab:19:a5:a8:61:41:dd:74:7f:cb:
ab:21:17:66:d0:98:61:3e:7f:af:eb:2a:ca:5b:16:
1e:99:3c:f5:72:35:e6:cc:06:5d:78:c0:63:97:56:
b3:18:32:02:a8:9c:b2:90:8c:9a:58:09:14:c6:69:
82:a4:41:dc:c3:22:cb:78:3e:f6:0e:a4:46:44:e3:
51:19:64:55:d2:24:a5:b4:51:53:8d:11:c2:6b:c1:
9b:ab:83:62:b1:27:70:55:06:e8:15:a1:72:a7:f2:
49:89:12:67:c4:60:49:cd:24:69:0f:b2:d3:4f:6d:
21:49:b4:3e:62:3a:79:6c:96:e5:78:f0:7f:c8:b7:
d4:d7:62:dd:6e:98:dd:e8:20:d1:4e:3a:4d:0e:2b:
cd:58:aa:55:5e:0f:ed:3a:de:86:f2:10:8c:40:8b:
65:c7:42:40:78:c2:bd:11:e1:17:4c:67:e7:2d:22:
dd:8d:25:cc:51:c7:ec:39:65:7a:48:d1:3d:e0:e8:
76:a8:1e:89:5a:fb:63:49:b0:b1:e3:91:70:b0:b2:
65:52:9b:07:60:75:3b:d3:31:40:cc:5f:a1:72:0c:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:13:6C:7F:D6:AE:20:92:2A:32:F3:AA:B2:E0:49:73:CE:6F:93
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:d0:98:61:6d:02:19:6d:62:63:1f:df:bd:10:94:c0:2b:85:
b0:6d:e4:b5:8a:e2:b1:bd:3c:e8:e3:02:b1:ee:ad:aa:e6:05:
ea:65:9a:8c:4b:3d:0f:b8:f5:b3:b9:9b:c0:6b:9f:fa:c4:99:
28:e7:ae:ee:03:d7:e6:58:b1:b7:fb:b1:ae:58:db:a0:3b:67:
b7:ac:8f:4f:39:dd:09:61:3f:4d:59:46:6e:2a:e5:ad:95:c5:
57:0b:fa:95:cf:da:1d:ad:f0:61:b3:7d:b0:9c:13:a2:4c:0a:
dd:40:c1:67:0d:8c:0b:69:21:a4:91:ec:80:9e:62:17:6f:14:
f8:0e:c8:1b:34:f0:f0:56:c0:0b:be:6b:5c:a0:00:eb:05:b4:
91:58:6e:be:1b:75:a8:c1:9e:13:b5:cc:59:2e:49:e0:9d:f8:
8c:c2:82:4c:4b:fa:74:34:c7:bf:6d:42:bc:66:15:06:b7:49:
bc:d2:4b:d2:ef:8a:d7:3c:0d:fc:cf:dc:64:65:c0:5f:ea:44:
97:1d:5e:23:dc:83:43:2e:5a:1b:b9:3a:85:96:f7:57:97:39:
da:7b:ee:7a:05:eb:5c:25:5d:ba:5a:bb:05:e8:2e:6e:97:10:
ca:89:3e:d3:2c:50:85:21:a8:04:28:8b:e8:05:94:92:67:f5:
84:ed:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:31 2025 by rpki-client