Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
File: jZ9OgtuoAjmZ772tNLJxofSJLp4.mft (raw, json)
Hash identifier: W23QfRRNPQhKS3yDOmgn2lbKDhBWngiMzgoiaSaAYSw=
Subject key identifier: D8:D5:0B:AF:97:45:59:DA:EF:08:03:99:CE:81:3E:E7:4A:83:C7:E0
Authority key identifier: 8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
Certificate issuer: /CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Certificate serial: 019A72259AD48C7632171A10D3FD5B9CD688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
Manifest number: 0478
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: jZ9OgtuoAjmZ772tNLJxofSJLp4.crl (hash: U569b9A7u6B8IEEQfVn1Od8tsfrXPLkmdnfbnZGO9wg=)
2: x_n8t7M8D_Bv99KviCzCearCTfY.roa (hash: 6UUSvMuuFuiYjyRFMf2UhzrLvu7QDsz9ziOkSElPsPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9a:d4:8c:76:32:17:1a:10:d3:fd:5b:9c:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9f4e82dba8023999efbdad34b271a1f4892e9e
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=d8d50baf974559daef080399ce813ee74a83c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:dd:40:03:07:ce:e6:71:6f:ce:fa:7f:63:
3d:4a:e4:39:35:ec:28:29:8e:df:c8:4c:98:fa:26:
0a:6f:5f:f7:4a:c8:e3:e6:45:5c:35:7d:f5:0a:6f:
5c:c1:54:99:cb:06:45:8e:d9:77:1b:72:31:56:2b:
de:19:24:62:d6:2d:18:fc:a7:9d:b5:ca:d7:73:21:
e6:d4:a4:6a:26:80:c2:ed:37:e7:13:03:74:01:60:
65:70:b1:11:c5:08:81:40:ed:a2:70:02:ae:08:a6:
64:6c:33:27:cb:05:6d:51:a6:50:5a:1b:4a:e0:b2:
8f:9d:e6:b0:c4:56:fb:84:99:79:5a:1f:77:b1:d4:
bc:e3:85:fc:e2:49:cb:4f:8b:2f:fd:9e:76:c6:a1:
b1:69:b0:1e:e0:a9:1e:d5:34:ed:18:1d:ef:60:e9:
79:78:f7:66:5d:c9:d3:a0:7a:03:ad:09:f8:fe:ba:
60:33:3d:50:52:d3:b4:0b:3f:b8:d5:21:a4:a2:c4:
ed:13:4a:f7:df:88:58:0e:c1:80:ae:c5:8e:d3:f6:
e1:c3:f8:68:ec:4d:69:37:0f:ef:15:50:33:65:46:
13:cc:2e:51:69:0e:36:5b:3a:b9:83:83:24:2f:09:
13:e9:a7:5e:2e:6d:c3:9b:65:79:99:de:95:53:ee:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:0B:AF:97:45:59:DA:EF:08:03:99:CE:81:3E:E7:4A:83:C7:E0
X509v3 Authority Key Identifier:
keyid:8D:9F:4E:82:DB:A8:02:39:99:EF:BD:AD:34:B2:71:A1:F4:89:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZ9OgtuoAjmZ772tNLJxofSJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a66491-ffb0-4a42-ba13-fbd9feb0f13c/1/jZ9OgtuoAjmZ772tNLJxofSJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4e:a8:09:e0:59:7a:21:95:80:ec:d0:86:3f:00:3f:de:56:
f5:db:25:46:5c:53:ce:dd:0b:e7:ac:e9:c9:83:5e:f2:6a:56:
c0:10:59:03:44:dc:7c:a4:62:cd:46:d5:6f:a1:eb:09:d9:31:
ed:28:0d:ff:56:6b:a1:3d:1a:4c:f7:c8:3d:1b:1d:7b:ca:31:
0b:1d:cb:26:4b:1a:4e:73:29:0a:23:e6:4b:dd:61:ea:76:ad:
eb:3b:5d:47:25:c0:41:e1:15:1f:00:22:a6:31:d1:ba:6e:fa:
8b:4e:b7:42:2a:25:af:79:77:bd:ee:ce:f9:d0:b9:4a:50:44:
c6:49:3a:5f:ed:86:97:fb:26:dc:fc:df:c6:d8:83:23:8e:0c:
7c:d7:08:89:df:9e:29:e4:76:c2:47:2d:80:08:de:e0:c1:c0:
b7:e6:c1:81:41:a5:9e:1a:54:c5:0c:f8:b0:ea:48:97:ae:01:
bc:7c:0f:23:c6:cf:6a:8e:53:e7:e7:f3:6e:dd:59:ab:a6:96:
13:cd:56:fd:89:c3:bb:a1:8d:7c:a0:90:fb:48:76:a2:e3:48:
a1:95:3a:cd:01:30:c5:9b:3e:0b:1b:92:73:ab:79:a1:8b:3a:
dd:61:06:e8:9e:54:2a:c3:01:56:af:da:48:7b:99:35:14:13:
2b:0d:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:09 2025 by rpki-client