Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: L3a3LvjP4gr17GRSJv36Nc56xA3wQNJ83UzhxjwEDF4=
Subject key identifier: F2:8A:E6:69:25:44:88:A2:96:30:C5:66:28:AB:41:67:E3:8D:42:57
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 019A71EEF84EB62AE1C8D3E64FFC34517F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0D47
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: vgc5FjgNnB5uZYT33sDokZQjm68GgxthQ21627vzqxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:4e:b6:2a:e1:c8:d3:e6:4f:fc:34:51:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=f28ae669254488a29630c56628ab4167e38d4257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:3a:05:fe:0b:01:d6:d8:ce:5a:b8:b3:1e:
d5:2a:2f:26:60:84:a3:de:b2:bf:f4:dc:df:23:32:
86:46:92:89:a4:97:bc:44:cd:06:e3:22:c0:0e:29:
f7:01:4d:2a:8b:56:63:1f:80:db:bd:ff:a6:99:bf:
ce:1c:22:df:b8:ec:f4:2e:40:cf:cb:3e:2f:5f:54:
fc:4b:8c:d7:fb:62:75:54:1b:5b:73:04:f2:98:93:
8a:31:d0:0a:08:b9:01:11:f5:52:2b:d0:47:01:d5:
5d:6f:d2:66:2b:c3:03:fc:56:fd:b9:ea:c7:69:d3:
28:7e:77:25:f1:52:2a:e9:52:3d:51:3b:08:23:37:
1d:a9:d2:c4:06:5f:e2:e8:4c:c4:39:19:9d:29:dd:
b4:4b:62:75:57:2d:a3:06:48:b2:b1:87:27:7c:90:
58:20:13:af:7d:51:26:37:a9:b9:01:ec:75:dd:fa:
ae:9d:32:86:9a:28:96:b0:6f:b3:88:cb:39:ec:a4:
4e:91:ad:20:72:7a:1c:d0:a1:19:4d:9b:9a:ca:3c:
a7:6f:d6:13:a9:75:51:6e:a0:75:01:78:c1:c2:24:
30:45:f2:63:a4:50:3d:fe:6a:0d:6e:df:78:10:1f:
4e:ca:ea:26:c6:5e:14:fc:75:4c:8a:d4:21:ec:a4:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:E6:69:25:44:88:A2:96:30:C5:66:28:AB:41:67:E3:8D:42:57
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e2:d3:47:14:ae:36:b8:db:68:67:f7:d3:37:cf:a0:be:08:
c4:6d:0f:88:a8:fe:3a:d0:3e:4d:c2:39:cd:9a:f5:14:9d:b5:
42:e3:d8:eb:4c:3e:4b:3d:2e:2a:6b:81:57:63:ae:83:b7:41:
b9:c2:0a:3d:50:92:21:50:6c:35:4c:3e:08:f1:57:7b:3f:5c:
47:5a:da:85:b8:27:86:b6:01:37:ce:88:9c:92:02:3f:8e:57:
62:a9:1d:97:18:d1:ef:ad:79:c8:44:bb:a5:88:a1:a8:dc:0a:
64:95:66:74:ca:86:a2:68:bf:22:d3:e4:04:7a:25:46:80:46:
17:06:2f:05:69:47:81:77:d2:75:d3:82:c2:ac:43:09:2a:df:
aa:b2:5d:aa:e8:72:c5:2e:06:50:e7:75:2e:95:77:c2:81:29:
4f:fc:02:fa:0d:1d:a7:20:37:d2:8f:20:6f:9e:23:81:24:41:
e8:7b:78:26:4d:16:8e:04:b1:4d:f8:fe:e4:da:77:12:b7:44:
40:39:9f:77:45:df:4f:33:b8:cb:d7:42:80:00:49:c5:84:ff:
ab:bc:63:f0:15:20:b5:c8:8c:51:41:58:38:5d:a9:fc:38:a4:
15:01:94:c7:32:43:a0:27:84:1a:ef:68:a5:b3:f1:32:0d:1d:
3d:8b:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:19 2025 by rpki-client