Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File: jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier: zRS1FLJsJ2al/QStJZGYWIJhvpXi24XvBC4uOdMNxEI=
Subject key identifier: 67:0D:E0:DF:64:6D:9E:60:41:39:AE:0A:28:D1:57:1E:02:89:76:B6
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 019A70A519F74508F2428BF6E9E4724B0AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number: 1279
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=)
2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: EmX5x+i/+oykVQflAnVuxzvD0WXcsIkIqzQamzUNupM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:19:f7:45:08:f2:42:8b:f6:e9:e4:72:4b:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=670de0df646d9e604139ae0a28d1571e028976b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:6f:62:e5:40:a9:d8:e8:0c:da:fa:ff:48:
59:ea:7f:54:78:70:e4:70:11:0f:23:b4:74:4a:b1:
1a:ea:04:e4:7e:da:ee:bb:81:5d:8b:18:8c:ea:00:
7e:1e:48:94:57:67:f0:91:27:85:8c:d8:b4:f4:14:
6d:7b:c6:e5:8b:ac:11:d4:62:48:25:e3:b4:82:55:
cb:b5:f1:a1:5a:4f:ba:10:21:19:53:d5:f1:24:cd:
8f:83:30:cf:4e:1d:0d:34:2d:60:eb:84:a7:64:c5:
69:51:03:c9:1c:e7:1b:8c:4c:a3:57:d7:c6:d4:04:
40:6c:d8:83:62:6d:ea:cd:10:05:0f:06:99:17:7c:
3a:b3:a3:2f:7e:6d:bb:f3:14:52:f8:1c:ac:61:b6:
91:a4:3d:69:8a:35:4c:d2:49:f3:78:e9:15:37:45:
da:b9:42:b8:93:81:07:36:9a:23:7f:56:65:e4:66:
87:83:cc:b4:e0:f2:73:94:e6:5f:a7:d9:6b:7c:ed:
71:60:57:8c:22:49:3c:8f:10:14:a8:ad:b9:7a:65:
bf:76:a4:f2:7d:e4:cf:cd:a4:80:4b:56:57:72:43:
86:e5:71:da:5a:bc:45:3e:75:07:d1:17:ed:c2:ac:
d9:35:be:5c:6d:de:f9:3a:c6:5d:46:97:b5:30:5e:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:E0:DF:64:6D:9E:60:41:39:AE:0A:28:D1:57:1E:02:89:76:B6
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:67:dc:60:38:66:85:9b:9d:ef:ef:a9:65:81:49:d1:0f:
f8:42:48:87:af:87:96:51:33:da:cd:14:f3:a7:8e:c7:eb:c3:
6b:bf:48:47:98:f0:4f:ec:24:da:2c:fa:c7:bc:04:e9:77:11:
87:d8:8b:88:96:57:c1:b9:19:ff:ca:35:d0:62:2d:62:9b:20:
9f:e1:df:bf:41:53:55:1d:b3:66:40:5e:28:05:71:76:54:d5:
84:1a:e8:89:15:97:6b:e8:9e:5b:55:18:64:f5:0b:4d:b2:7b:
50:ad:b4:7e:a9:08:7e:05:05:72:cf:42:55:7b:14:0b:03:a4:
42:eb:ee:99:a6:c2:82:dc:36:69:e9:8e:01:0e:aa:84:92:d8:
a0:c2:d6:b6:7d:f7:89:52:f8:5d:23:42:74:31:69:ab:57:c1:
f3:52:2f:9e:b8:48:59:96:ba:08:81:b7:dd:a6:e7:9a:03:3b:
9e:6c:d6:e6:0d:83:42:9a:6d:5d:c0:76:cc:8f:35:c1:ff:f8:
1a:f3:b8:a3:b9:ef:5b:53:ad:b3:49:ac:53:73:bd:65:a2:13:
6f:8a:f5:df:c9:6a:64:ee:52:7d:ef:e4:42:86:ed:05:fd:4d:
a8:3c:43:a7:bf:ef:68:76:3c:8e:98:eb:f3:83:9b:c9:f0:0e:
2a:96:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client