Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: LORDlL8kkOzLzhAdpIGShdTgEsdWxg+Vem8zvFf6xGk=
Subject key identifier: 6F:81:6D:F1:82:69:7D:6B:6E:47:93:71:94:19:13:D5:8E:86:74:D5
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019A7149C3D7E7E084F05A95D6C045802812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 12CC
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: jjAGABd/7mFGdvubflcgalEQCZZHz0PnCa1HBjjJcos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c3:d7:e7:e0:84:f0:5a:95:d6:c0:45:80:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=6f816df182697d6b6e479371941913d58e8674d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:77:80:8d:74:ca:3b:b8:9d:3b:c1:8a:35:
7c:6e:d9:ac:c1:93:03:d3:8d:e9:e2:4f:56:2d:1d:
e0:73:60:38:46:2c:53:a4:e8:d1:f3:88:d5:ad:a9:
ea:f4:3d:d4:b6:26:65:74:10:7a:d0:96:6c:2d:cf:
94:dc:09:2c:95:42:8b:dd:49:49:b6:da:72:94:bb:
91:0b:a6:ce:50:b2:af:e2:25:9a:b7:a2:19:42:02:
a6:5a:43:4b:5d:b5:44:aa:03:7a:2a:41:84:cb:29:
5d:59:a8:ef:5a:fb:9b:35:30:fe:50:58:ed:91:f7:
2f:c4:ff:87:90:d3:83:69:c3:a1:2c:78:ef:bd:21:
fc:ac:fc:e9:8d:66:49:f0:4c:a6:18:82:6b:66:0a:
77:31:5f:72:4e:e2:ce:3d:9e:27:61:25:b4:54:64:
6a:03:23:18:e4:d3:a4:6d:de:80:08:4a:69:bd:1b:
ae:47:7e:ef:16:6d:f9:ea:9d:38:de:c7:9b:bb:9d:
55:e5:5b:a6:59:99:4b:0f:20:71:a8:78:68:1b:23:
d9:cf:4e:49:e1:32:eb:0b:64:08:ab:33:c6:06:26:
b4:2c:b4:02:31:85:85:ee:cd:34:22:27:96:c9:19:
73:f7:06:f8:55:6b:94:00:e4:e6:5d:f7:fb:3d:99:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:6D:F1:82:69:7D:6B:6E:47:93:71:94:19:13:D5:8E:86:74:D5
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f1:57:b3:e0:59:ec:8a:8b:1b:c8:11:b0:a2:55:34:6c:21:
08:41:4f:66:55:af:db:e4:26:4f:dc:1e:4c:7b:b5:dd:a3:ec:
62:62:c3:24:36:5f:ba:7d:a3:ba:a2:7c:38:c1:64:9f:a0:a6:
bf:c1:b4:9b:d8:25:95:9a:bb:bb:18:3e:cd:ee:07:26:8c:57:
e1:54:84:1a:c5:0c:8f:7f:65:a7:f6:df:12:1d:15:dc:ec:9a:
fb:98:ea:2a:5f:55:61:bc:d1:4d:a3:ae:42:7a:8b:ef:c2:36:
4c:1c:52:66:d3:08:c5:bc:72:67:5b:e9:26:7b:ac:4e:28:9f:
fa:aa:f7:7b:ad:b6:2f:4b:ff:cd:95:ca:70:ed:a7:dc:41:12:
fb:78:73:3c:52:52:96:7c:85:e7:45:5a:df:25:b7:be:22:1d:
46:77:03:d7:0f:e6:a4:50:12:7a:15:e4:4a:ea:ff:1a:21:08:
1b:00:e0:fd:31:24:c6:aa:fa:2f:52:0a:29:72:28:8e:d9:6c:
49:19:c3:c7:16:13:21:63:0f:f1:21:5e:8c:e8:2b:99:42:7b:
72:90:c0:c6:9b:c1:e8:4b:b7:9b:01:18:5f:56:c3:a7:c3:60:
fd:43:3e:b7:bb:60:3d:f1:e1:18:ca:6c:6e:f6:11:ec:6e:a8:
e3:bd:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:08 2025 by rpki-client