Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: EMsgOW0iz4hZrZtDaOVfNHlge9lRDSsP2iR9qlDYN0M=
Subject key identifier: E4:58:C5:FA:6F:EC:AD:DE:2A:70:26:98:53:FF:C1:F3:13:BA:06:E9
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019A23653E7F4B7E33CA406CDE85572FFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0D2F
Signing time: Mon 27 Oct 2025 02:00:28 +0000
Manifest this update: Mon 27 Oct 2025 02:00:28 +0000
Manifest next update: Tue 28 Oct 2025 02:00:28 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: OsvSr8B3e8d0VAGBS7UQYS9PK37aow/ZVbU+O/c+ZXo=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:3e:7f:4b:7e:33:ca:40:6c:de:85:57:2f:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Oct 27 02:00:28 2025 GMT
Not After : Oct 28 02:00:28 2025 GMT
Subject: CN=e458c5fa6fecadde2a70269853ffc1f313ba06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:1d:25:9c:ec:c1:fc:8d:84:38:d7:47:ef:
e3:8d:28:7b:d6:92:73:de:da:9c:5b:30:b4:58:7b:
14:a2:be:63:62:87:8c:13:c3:27:ee:07:0b:f2:37:
78:fa:ec:36:2e:f2:74:45:68:bc:68:5f:b8:8e:e7:
91:31:30:2f:91:06:9d:cb:ed:3f:dd:51:1c:bd:e7:
5c:ca:f3:fd:19:af:eb:02:5f:11:0f:06:20:34:19:
07:25:fc:a1:fc:cc:71:16:1b:f4:ad:7b:6a:5c:98:
df:61:a5:07:0a:f6:fb:62:89:84:95:bd:b5:31:c6:
8c:ae:92:3c:03:f1:0f:f0:42:33:1a:18:9d:fd:31:
65:21:66:fd:17:3f:aa:c6:10:5d:d6:80:bd:34:ea:
40:3d:54:ab:dd:dd:df:11:66:b8:40:fe:ed:b7:a3:
08:90:f4:3d:22:f2:46:01:9e:cb:f0:95:e0:55:03:
7d:b6:98:03:5e:26:0a:92:2c:7f:08:e6:51:15:20:
57:3c:a3:33:07:c2:b6:60:95:12:e6:bf:e5:e5:11:
20:e3:e2:e5:37:ec:ec:0b:ae:09:e6:33:d7:d8:ce:
04:b2:ca:95:54:cb:db:73:cd:7d:3f:bd:9a:09:68:
5a:d1:69:77:80:95:69:fc:b0:79:49:b2:96:67:2c:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:C5:FA:6F:EC:AD:DE:2A:70:26:98:53:FF:C1:F3:13:BA:06:E9
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:12:6a:b3:02:8a:b3:eb:98:a7:bb:dc:67:0d:d7:3a:f3:
35:55:7e:10:fb:00:1a:19:82:7b:f5:59:08:ff:b7:e8:0e:ca:
f2:ca:e9:77:aa:f7:bf:d1:b2:1a:ed:69:d1:d8:a1:52:1a:e4:
21:84:f6:d2:11:40:39:74:ce:4c:f9:88:c3:99:83:78:51:0b:
1c:2e:d7:b5:5c:c4:a9:d5:36:fc:69:c6:a4:d4:28:9a:3b:82:
46:d6:2e:17:4a:aa:cc:f6:dd:bc:48:e2:69:a1:03:e4:03:47:
5d:57:97:a4:4a:a3:1f:0d:d3:65:4d:fa:3c:fb:ff:eb:23:8c:
93:c3:4c:84:7b:08:a2:32:57:c6:d0:62:1e:3f:66:6d:f4:16:
f4:95:8d:c8:20:07:e0:31:65:b9:54:03:03:f2:17:06:c8:2a:
84:29:90:08:aa:bf:21:1e:bb:8c:17:c3:7a:a4:21:bf:2d:44:
5d:98:af:13:17:1f:e0:c7:b3:31:c5:39:ef:cb:bc:21:21:c1:
9d:9d:eb:78:55:0d:5f:19:86:47:18:15:88:97:cc:7b:9f:d0:
88:8d:32:d7:20:6e:63:3a:81:24:51:60:37:4b:a7:84:b4:f1:
d1:34:07:2e:de:2e:47:cb:b4:54:9d:7f:0a:68:ff:3b:28:65:
a7:d7:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:52 2025 by rpki-client