Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: 5Kjw6icfu3ZVJeBh+sIWki/Uf9qFmwmtVh4052L43v8=
Subject key identifier: A8:17:95:53:A2:06:73:61:A1:3B:2C:CC:B3:6C:02:8A:6B:ED:39:8E
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019A71EE9BCF980A359C53FD26F109368DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 13FA
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: VljHH0tl9amkyudkfyBWXzn8oIrgceOv/523JDW8lS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9b:cf:98:0a:35:9c:53:fd:26:f1:09:36:8d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=a8179553a2067361a13b2cccb36c028a6bed398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:08:94:af:21:9f:46:ea:e2:61:70:d6:3b:
75:87:67:e1:bb:f6:55:79:b5:ad:10:55:f9:36:26:
1e:1a:f9:ac:74:c4:e1:86:46:79:73:92:45:89:77:
fb:7a:0e:c2:1e:05:e6:3d:2d:98:09:3f:d1:a8:c6:
2b:70:6c:19:17:f3:e1:77:24:25:06:ab:cd:48:e0:
bf:b1:43:e9:dc:e5:92:35:0c:e2:00:5b:87:c4:24:
84:cf:2b:46:61:12:32:99:d3:59:06:c9:d4:c9:34:
94:0c:aa:e4:fb:31:1a:45:26:96:e1:00:34:55:95:
c7:e9:f3:e6:55:7f:46:ad:45:ee:60:7e:69:e2:14:
45:6f:3f:cf:4d:c9:9a:d1:6e:84:38:d4:c4:0e:9b:
b9:62:7e:45:d1:3a:84:b1:26:c4:d0:c1:a2:09:a9:
42:a5:41:1e:c0:00:56:17:c5:25:e8:66:dc:37:a1:
31:7b:03:f4:ec:de:82:60:9b:b7:2e:70:18:18:25:
b7:92:b8:f9:fc:23:e2:0d:6e:d2:a4:79:1a:4a:9c:
8d:3c:2e:4b:23:dc:23:10:fa:64:5f:4a:2e:3a:cc:
c1:05:66:df:53:92:0c:df:de:0c:6b:06:5b:91:d5:
42:d6:77:84:31:5d:e2:cd:a2:ac:36:34:ed:fa:8f:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:95:53:A2:06:73:61:A1:3B:2C:CC:B3:6C:02:8A:6B:ED:39:8E
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5c:35:17:85:39:e8:50:80:5b:0d:36:be:85:c0:b2:9a:eb:
c9:08:a1:e9:46:f8:e9:c7:6e:75:b1:f4:9a:a7:70:74:b5:df:
da:30:7a:b0:3b:f7:41:64:60:b0:c1:d3:72:d4:c7:76:d4:a4:
5a:c0:70:bd:01:00:c2:46:7f:68:06:c3:50:27:1b:6d:31:ac:
c9:6a:e7:b1:40:bd:fe:a7:26:20:6d:17:76:01:c6:cc:62:23:
a5:8c:cb:e9:1c:0c:07:89:40:cb:34:d7:90:4e:a2:68:43:f5:
79:d8:a6:f0:31:d1:65:c4:de:1f:e2:e0:f8:97:4c:1b:51:41:
89:bd:5f:37:eb:b7:cc:a8:8f:02:c6:8f:f6:b1:88:db:0c:7b:
76:58:a8:7e:4b:19:11:a2:be:e7:f9:c6:c3:4f:e4:27:0c:b2:
f0:a0:23:1b:33:6d:a0:e2:b6:f5:9c:29:fc:b3:02:40:a2:b8:
bc:5f:3d:29:01:a7:61:64:8f:07:36:be:9c:b2:ce:37:21:34:
af:49:79:8a:0c:dc:e4:d6:55:08:40:b2:73:5a:b2:14:94:f9:
da:38:e6:0f:6a:42:0a:43:1b:33:36:2d:99:26:d3:da:31:4f:
ce:d0:6d:f9:d8:0c:83:ea:99:b9:b8:21:c5:9b:8a:02:23:c1:
1e:de:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:57 2025 by rpki-client