Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier: 3bbl6zx/Oput3ieP+LrIVMBtZfZnnzOs8ScIXHptDDk=
Subject key identifier: 42:5F:4B:58:F0:B1:72:C3:93:BD:12:51:68:87:6D:9C:F9:7D:E2:2D
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 019A71EEB49A898E4FE3C2358840F1BFDE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
2: djrv_KaGCDUK_H0rgzzTkvu3xjk.roa (hash: Q78jKZVQp91Q5Wd8YBTF+3592+S1nmxVdme1CKTgnIM=)
3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: xH4e7q2pFIdKjEaSBDiy3sixeH1xDsmdsCI05urbQ+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b4:9a:89:8e:4f:e3:c2:35:88:40:f1:bf:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=425f4b58f0b172c393bd125168876d9cf97de22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:6a:9d:b4:74:05:af:f4:41:ea:97:2c:c6:
01:6b:91:0c:e2:cb:fd:20:88:a9:10:7e:38:9d:bb:
44:5a:6c:85:c8:7a:1a:8f:fc:e3:ea:78:63:af:98:
12:41:02:f0:5b:c2:31:8f:76:3e:ed:1f:35:1a:76:
ea:d7:8f:07:57:56:67:12:52:b2:0d:dd:cc:2b:a8:
66:be:bb:a8:cd:03:f1:68:36:a4:e9:b9:48:ed:85:
1e:16:e3:72:37:d3:af:45:d6:93:c1:f8:bd:a0:fa:
4a:5c:a8:a2:e9:ac:c1:43:6b:fd:f5:5f:71:82:2a:
f2:6d:97:be:13:8d:b8:2e:4c:86:d9:89:cb:56:fc:
92:6b:71:a2:28:f6:02:1b:30:3b:55:2b:3b:ab:ae:
91:82:83:0c:d3:c1:bd:56:75:a0:a6:a0:9d:20:06:
49:18:6c:9f:e2:33:7e:f0:0f:c2:3d:97:f7:39:37:
cb:b1:61:c0:20:3a:c3:ce:9e:37:e0:8e:7a:3c:da:
58:5f:6f:94:c9:f9:95:1b:52:d2:2e:2e:30:43:5a:
ef:f1:ee:38:25:52:73:e0:7f:bf:a7:29:e0:1b:6c:
35:04:33:bb:c1:e9:ba:c9:c9:09:26:4e:03:42:ca:
8b:af:81:b1:92:62:66:e4:0c:8a:9a:a1:c6:95:a1:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:4B:58:F0:B1:72:C3:93:BD:12:51:68:87:6D:9C:F9:7D:E2:2D
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:07:3b:f0:3e:f9:e9:be:e6:f6:8e:79:ca:e9:4b:42:25:
56:4c:7e:89:64:b1:3e:50:bc:4a:06:06:d3:4b:bc:28:fe:7e:
77:d1:b5:59:f0:5a:34:b6:af:e4:43:60:29:cb:4f:38:73:d1:
2d:29:2d:fc:90:bc:9b:c5:dd:59:7f:d9:b4:6c:04:80:28:55:
f4:37:8a:f0:91:74:78:05:13:6e:91:d7:03:d7:29:4a:7a:0b:
af:49:5e:fd:53:1f:3d:93:aa:29:e9:ce:fb:5c:6d:bd:33:6c:
37:e5:24:8f:23:81:72:de:c3:fb:be:f1:6b:09:96:15:55:28:
94:1d:2c:3f:6a:51:9c:26:0a:b6:d8:8c:c7:ef:e6:1d:c2:a3:
d2:51:c0:2d:c5:c5:8e:6a:71:ce:d1:4e:50:1c:7d:0d:9b:88:
11:d6:db:68:c1:92:0c:19:80:db:6d:c0:cf:13:cb:19:67:f5:
46:5f:89:f7:16:a2:7a:d3:4d:58:08:84:3d:c7:99:d2:27:e7:
76:f4:f2:60:2f:a3:29:57:54:89:10:d9:e9:87:94:ee:3a:b8:
0f:ad:63:a8:71:14:64:25:de:5a:1f:2f:35:16:27:87:e1:14:
71:d3:81:ba:31:92:c4:f3:b9:ab:f6:0f:d5:7a:6d:8a:db:5d:
6a:df:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:06 2025 by rpki-client