Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: dikWvLmf846mix5xUqiDdA4r4zgTcfoXPyzixNXgNXg=
Subject key identifier: 88:05:E2:00:8B:E3:DE:59:EC:D2:D7:B2:C4:75:C3:F4:6B:77:1B:D0
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019A71B8D2C9279A932D3AE7ED8E175E0358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 04A0
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: AkUGnO/Bf1Cwmq17wCN0tnYLqsw4bqPyVSm+KC6BjKE=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d2:c9:27:9a:93:2d:3a:e7:ed:8e:17:5e:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=8805e2008be3de59ecd2d7b2c475c3f46b771bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:d4:bf:52:df:99:21:a1:5c:d3:45:37:13:
49:28:6c:19:2f:9d:d1:00:9c:38:6a:54:b7:aa:c1:
87:dd:ca:16:46:68:d2:a8:cd:7f:8e:9d:b5:ba:f8:
36:02:9a:2b:db:73:3e:b9:51:03:9c:1f:f6:2e:1d:
f4:56:8e:d8:56:cd:03:9b:58:67:2e:b5:63:28:69:
de:4e:d1:fc:6e:6a:c4:b7:44:b5:9d:c4:0a:ed:47:
36:d0:90:5f:fa:2b:a1:9b:90:eb:4a:1f:18:e5:3b:
2b:62:e1:4c:12:57:bc:7f:9b:df:13:2f:99:6f:29:
b4:ce:f2:76:8f:a7:e4:bf:e7:5f:05:38:f3:d0:2e:
94:d6:08:24:01:11:df:6e:30:2c:b9:f3:e7:23:78:
00:08:a2:a7:5b:41:28:f2:30:ae:3b:55:eb:bb:29:
ad:b3:54:10:12:53:d2:2c:4f:80:84:16:7c:01:f4:
4f:d8:4f:f0:3c:98:59:2a:7a:14:78:b8:5a:82:c3:
80:b4:54:54:3c:be:f6:cc:11:8a:ec:f1:7d:5c:61:
94:c3:fb:1f:c6:f8:10:91:13:e7:c4:a2:66:fd:e4:
e7:67:e3:f7:86:ee:5e:c5:2a:21:96:ed:b8:2f:40:
d8:81:9c:3c:62:7c:ce:da:c8:e2:3d:86:1a:32:f7:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:E2:00:8B:E3:DE:59:EC:D2:D7:B2:C4:75:C3:F4:6B:77:1B:D0
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:d7:97:7c:70:c3:00:a2:02:b3:36:83:14:16:f0:0f:8d:
e3:33:cb:69:f4:b5:c3:ff:85:d9:f8:37:54:c8:78:42:2c:a9:
cf:36:cd:f2:af:ea:ac:e6:39:94:c3:69:37:be:50:84:9d:46:
a6:bf:89:b7:d3:10:d9:1a:ca:02:46:e0:d0:8c:65:14:a6:cf:
78:ae:52:c7:c7:ac:15:59:59:22:fd:4a:b8:77:4f:56:43:02:
9e:53:3b:e1:96:81:74:ab:42:70:3a:a9:54:d8:d6:9a:4f:39:
ad:d4:b9:66:14:cf:24:f3:ef:eb:d2:fc:88:c0:b5:44:41:de:
e8:8e:21:5b:9a:e3:01:96:f8:bd:6d:80:a9:7a:a1:bf:89:a1:
3e:46:36:aa:7a:c9:fb:66:82:fb:09:c1:eb:83:c6:d3:4e:63:
46:f1:8b:08:6f:bc:d5:f1:fe:ef:ac:4a:94:f8:13:66:2f:d3:
f3:2c:7c:0c:71:54:de:d8:48:81:61:7e:92:f3:43:ee:9b:cc:
8a:ce:06:8f:89:0d:22:a4:2d:85:96:28:13:ed:3c:d9:8f:79:
bd:f4:e6:04:a5:15:68:f0:34:6e:c5:94:18:68:a7:c9:58:04:
5e:4d:19:6e:76:d9:cd:0c:f6:7d:35:89:4c:18:59:02:77:fd:
51:6f:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client