Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: mc0KrbEVq/4+XkSzLPFtZN+q9M7NCkSqVZ3PrLUYbtQ=
Subject key identifier: 88:BB:12:A6:A0:1D:AB:84:03:53:B3:1A:F7:C5:90:75:C8:E4:68:33
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019A71132754A4C5577C3C36F250292E8375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 03CA
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: F1uEuLaR0IsIWAwdF9xYKBsc7+zYXQ1gJVArkkwJCN4=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:27:54:a4:c5:57:7c:3c:36:f2:50:29:2e:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=88bb12a6a01dab840353b31af7c59075c8e46833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:d6:d3:4b:72:1a:aa:db:36:32:e6:9f:6c:
bc:d0:33:6c:74:06:32:a0:43:15:c5:72:9a:09:bc:
c5:fb:0c:15:18:3a:2b:5e:a7:27:be:14:6a:8f:34:
0e:15:86:9e:b3:5f:d1:c3:02:2b:5e:60:b6:ba:4e:
c9:6f:8a:4f:89:82:23:c7:bc:ce:69:82:32:ed:37:
e6:fa:ee:1f:8f:ee:00:4d:cf:b9:c8:cd:32:ab:3e:
cb:fd:94:e9:f3:a8:1d:c5:a0:dd:62:1d:43:0e:bb:
09:59:76:d9:bc:26:05:c8:5e:62:85:42:a4:2d:0e:
e3:99:71:9c:51:df:b4:9f:79:64:8d:b3:99:4c:5f:
af:44:aa:25:66:f3:dd:a9:db:58:df:94:18:01:67:
18:02:3c:6f:bc:4e:ce:c0:1f:04:44:70:71:fb:8f:
e1:e3:37:9e:66:65:41:8c:39:93:8f:8f:0c:31:15:
86:c1:2e:47:93:7b:46:e3:54:99:c5:ab:8f:4d:d8:
52:fe:e1:57:72:ec:fd:9a:70:e8:29:5f:90:91:bc:
93:d7:73:12:f2:78:65:26:fc:d9:e9:97:01:32:39:
f9:7a:89:a7:50:30:d8:92:b7:84:f2:73:73:e4:1e:
75:64:19:f3:1c:2e:f3:ab:6c:31:45:3f:0b:20:7d:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:12:A6:A0:1D:AB:84:03:53:B3:1A:F7:C5:90:75:C8:E4:68:33
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:0c:3e:90:46:b8:bb:af:7f:6b:17:4b:d0:b0:35:8f:21:
e4:b8:ed:ed:15:90:e9:7d:d3:6d:35:d4:db:19:3a:59:4f:e9:
60:d5:d8:cf:60:98:b7:38:58:b7:52:2b:f5:53:03:02:91:66:
93:3c:f2:49:ca:82:2d:df:f6:62:68:50:93:03:b7:ee:bc:3a:
10:f5:c7:ec:38:7e:6e:f4:da:c5:1c:24:45:74:3a:e1:bb:f9:
23:fe:4b:98:24:d5:f1:a7:98:a1:8a:eb:49:74:fe:bc:48:e7:
3e:7a:49:29:5e:b9:5b:61:8c:0b:7c:77:5e:ce:b0:32:fa:ba:
1d:b2:b7:2d:1f:d6:39:33:12:80:79:2e:04:e2:d7:e0:c2:d8:
55:0d:3d:f6:0a:8f:73:c3:a0:b9:88:9e:0e:5b:53:c5:40:62:
a3:ed:1a:1e:3d:c6:10:70:48:8e:be:7a:5d:95:ff:a6:e7:1e:
7b:0d:3a:58:94:39:da:f5:1c:6c:cd:88:17:ef:86:f8:60:84:
a3:01:67:52:68:ec:6a:f8:9b:f3:42:34:9f:76:9a:cc:a8:02:
57:f8:f0:46:af:60:be:22:6f:5e:61:c3:80:9f:76:0d:78:27:
c7:e4:32:a7:6a:a4:18:99:4a:3b:ce:b9:6b:91:2e:d3:58:17:
5c:6f:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client