Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: zSKQLWDrUVpWhNf+df++vMYD4apjlEia5E3zJjlkG4M=
Subject key identifier: 77:8E:26:F0:0A:CC:A3:86:05:0C:27:B0:33:56:7D:9A:07:6E:99:F1
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019A70A54A9070E2B5410B2644EBEEB446FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 09E8
Signing time: Tue 11 Nov 2025 02:01:11 +0000
Manifest this update: Tue 11 Nov 2025 02:01:11 +0000
Manifest next update: Wed 12 Nov 2025 02:01:11 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: pIfyYa0xVWk2XbuHYsXLlL93bHLBA0erbBxnqNL3Exs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4a:90:70:e2:b5:41:0b:26:44:eb:ee:b4:46:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Nov 11 02:01:11 2025 GMT
Not After : Nov 12 02:01:11 2025 GMT
Subject: CN=778e26f00acca386050c27b033567d9a076e99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:e5:52:65:9f:00:29:fd:cd:2a:fc:cb:fd:
01:9f:05:8a:f2:31:20:14:b1:a2:19:27:04:7a:1e:
2a:cf:17:f9:80:e2:bc:37:8a:c5:f2:71:64:c4:ca:
13:40:50:4a:4c:20:2c:ad:ac:01:c5:f3:89:df:cf:
28:1f:b9:2b:51:81:3e:eb:9f:48:37:26:29:5b:ac:
a5:a5:83:6b:eb:2b:fc:70:56:79:fb:be:f2:08:fa:
4a:c0:cd:44:b9:10:49:ee:78:a7:22:1a:fe:04:da:
db:03:23:b0:29:8f:32:1e:46:17:ba:55:b5:4f:d7:
eb:0b:68:36:29:96:1a:d6:64:68:fa:57:52:fd:9d:
85:b1:bf:3b:46:09:24:bc:ea:e7:9d:46:08:51:97:
1c:a6:a6:14:76:af:c4:87:9b:1e:fb:84:1d:bd:09:
c8:0e:7b:ec:3d:c4:b5:2e:27:eb:ef:ef:f1:fb:37:
2f:f3:78:1c:67:12:22:ed:1b:32:2e:a6:60:82:58:
c2:b5:48:b5:4c:c0:06:a8:cc:d6:2a:b9:52:7d:14:
0b:d3:1b:23:1f:39:be:93:eb:8a:d3:4d:ed:0e:2f:
c7:a4:36:37:9b:81:0a:58:55:c3:e8:4d:dd:58:2a:
a5:38:8d:c6:22:a9:ea:25:b2:59:3a:f0:d4:ca:2a:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:26:F0:0A:CC:A3:86:05:0C:27:B0:33:56:7D:9A:07:6E:99:F1
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d5:75:51:46:c1:75:69:9a:65:39:09:44:79:ea:1e:c7:ed:
da:a5:6a:42:9a:3a:9a:97:40:a3:f0:d7:f8:e1:65:ad:46:79:
ec:80:cd:eb:25:c4:79:5a:79:88:37:a7:90:b5:66:dc:61:06:
47:af:de:3e:f2:9f:e3:27:ba:8a:73:09:3f:d1:c4:b1:39:39:
74:67:28:1a:61:3e:2b:71:5e:df:13:1c:85:ed:e1:49:11:eb:
41:e5:07:71:9f:8f:86:18:36:c2:48:1d:8f:84:71:8a:eb:57:
39:35:b9:6d:cc:eb:9b:1c:f7:38:bb:c2:a7:0c:5e:7d:8a:d6:
bf:8d:ba:14:96:67:dc:fe:fa:0f:6a:64:4e:03:be:71:f2:14:
69:4a:09:57:21:c8:86:92:d2:6a:70:6a:35:c7:ab:b3:83:88:
04:c8:90:16:4f:c6:da:7f:eb:c8:b8:2f:a3:9a:29:2c:0b:93:
58:de:93:63:a9:74:25:33:67:70:ff:be:81:9e:81:84:e1:0f:
79:76:78:f8:19:15:6b:a1:5f:96:c0:11:20:8e:ca:87:27:29:
a4:2f:bd:72:f2:c4:ef:72:b0:5c:91:df:b8:46:a5:7a:94:e0:
b6:ff:57:38:66:ad:5c:46:6e:88:e9:1b:6a:21:78:1a:01:40:
36:8e:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:31 2025 by rpki-client