Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: W+tjZlSB0a7bewYGfu2sAKlsIp6RHMs3ZZxDvK8kzbw=
Subject key identifier: 39:B9:05:98:B1:49:CC:FE:7A:3C:2B:01:44:37:E7:46:A3:F1:FF:B1
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 019A72CA6A944DC539FE8E226610598AE73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 13B2
Signing time: Tue 11 Nov 2025 12:00:59 +0000
Manifest this update: Tue 11 Nov 2025 12:00:59 +0000
Manifest next update: Wed 12 Nov 2025 12:00:59 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: mspGxG/sZ7GreMp3RxWEFo9almyqIAmFza/hq9/usz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6a:94:4d:c5:39:fe:8e:22:66:10:59:8a:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Nov 11 12:00:59 2025 GMT
Not After : Nov 12 12:00:59 2025 GMT
Subject: CN=39b90598b149ccfe7a3c2b014437e746a3f1ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:19:5d:c9:c6:58:0d:77:18:29:cf:f0:6e:
81:33:af:13:22:cd:4e:89:65:78:dd:0b:72:d3:c2:
97:cb:0f:4c:bf:48:35:12:58:ec:4b:33:68:74:51:
63:35:59:3a:c4:e2:6c:ca:fd:23:3a:d7:d3:23:28:
66:84:40:87:a5:d7:1d:c5:66:da:f2:3c:6b:cb:66:
65:43:44:9b:49:a6:da:fa:7a:c5:a6:39:b4:64:f5:
2c:a5:9f:52:aa:d1:00:e5:12:5d:e6:43:25:0f:58:
58:f6:c3:5b:03:4e:d9:3e:21:e5:14:fc:69:d2:65:
cf:7f:47:e8:a4:a7:53:0f:4d:6e:9b:01:db:79:c9:
3d:62:30:cf:5f:b2:e8:92:5f:f7:e5:85:34:ee:2c:
d5:e3:df:09:e6:e5:cb:3e:d4:ee:58:04:bf:e0:8a:
1b:b3:42:b9:3d:43:59:76:a7:bb:08:7b:09:00:d8:
cd:70:50:7e:78:3e:79:75:eb:94:07:77:aa:ce:1f:
5e:54:e9:b7:e9:16:e3:74:a0:ba:1b:05:3a:bd:76:
55:b3:17:cd:d4:62:36:fc:9e:86:01:3c:0b:3d:6c:
34:57:c0:7e:33:8a:7d:cf:9c:a4:69:bc:37:7e:89:
5a:15:11:a8:0c:d4:13:de:ae:64:b0:c0:54:46:1d:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:05:98:B1:49:CC:FE:7A:3C:2B:01:44:37:E7:46:A3:F1:FF:B1
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1b:a3:81:5a:98:38:ec:a6:27:c0:d2:a0:27:42:20:be:02:
b7:26:00:08:d7:fe:3e:2a:98:98:b4:dc:56:2d:3d:e2:96:e9:
07:08:6c:0f:19:78:b7:db:34:32:69:39:00:9b:58:39:7c:42:
81:3b:93:97:23:50:2a:18:fd:8f:9a:e4:51:98:da:c5:4d:4b:
b7:1f:26:03:f9:1d:08:f4:ba:95:11:d3:5e:e5:94:ff:d1:0e:
4d:d1:97:a1:5b:b3:54:52:78:79:7d:d7:12:46:bd:6a:20:42:
3a:45:29:49:da:23:07:ff:ef:a3:e3:d0:f4:6a:fc:3e:11:58:
66:7b:64:e7:46:63:35:6c:4d:2c:81:52:bd:c1:d3:d8:1a:46:
4a:f2:08:87:a8:8e:b0:fe:f5:e9:66:0e:04:c9:3e:4b:71:00:
91:8a:55:84:ab:d5:03:17:1c:8b:83:0c:11:71:71:90:02:8e:
6c:28:92:7b:c7:bd:62:da:23:8f:69:6c:ae:fd:7b:d4:e7:6f:
0a:66:d4:61:57:bd:62:60:d4:5a:ab:ed:01:05:e5:7e:5b:14:
80:38:41:c5:7a:81:f2:66:c7:a1:b1:8a:ed:e6:61:cc:bb:43:
61:0d:a4:c3:90:0c:8e:01:f7:08:29:25:18:44:71:8d:ff:25:
29:05:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:05 2025 by rpki-client