Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: 5mCPt0WD4iuSSlEmHErPUTlekeYr1BLkVtxwgoyh+P0=
Subject key identifier: D8:D3:A7:7D:35:36:32:2C:86:BE:02:B3:95:38:D3:4B:F6:E5:17:4B
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019A70DC19DFEFFEF5073DBBCC329FD4A2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0F92
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: S8TF4+JHrVImJWeNhI41k9oaxbLPAU8DkVinweuula8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:19:df:ef:fe:f5:07:3d:bb:cc:32:9f:d4:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=d8d3a77d3536322c86be02b39538d34bf6e5174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:d3:61:9f:01:5c:41:26:a6:69:68:8e:0a:
28:4e:a7:c6:cb:17:5d:c7:91:ec:e8:36:26:b6:a3:
e8:7e:63:8b:88:56:8e:1e:c3:d2:6a:15:8a:1c:42:
1b:34:88:45:76:0c:35:7e:af:9b:26:71:66:b4:19:
d0:ab:b6:6b:d7:f2:68:7e:11:fb:0e:a6:e8:fc:4b:
a7:de:5e:f8:78:4a:8d:0f:bc:98:44:29:20:3e:6d:
32:66:88:a4:28:5a:54:22:ca:a9:3b:63:4d:98:85:
37:50:32:20:e4:ca:be:ae:8f:15:0a:9d:22:d6:40:
6f:e8:90:16:f8:40:4e:0a:54:c5:6c:fa:4d:00:91:
bb:fa:68:ce:4e:7e:1a:0b:56:df:4c:dc:32:4e:e0:
74:99:85:dc:74:35:6d:ed:83:5a:96:cd:86:f7:11:
94:84:80:3a:a5:31:a3:0c:b2:e8:8d:b4:48:a2:80:
b7:6d:19:9e:90:7c:60:56:78:39:30:2e:0a:97:15:
2b:75:44:f9:3f:97:84:3e:f0:35:79:4a:b2:e2:65:
d9:ec:ec:c4:ed:ff:e1:6f:3b:f5:f0:21:67:d1:8f:
50:12:b9:f8:9b:9a:9d:0e:4d:94:fb:91:58:72:d4:
e8:d5:33:50:ff:64:cf:13:c1:d9:e1:7a:7f:3a:ac:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:A7:7D:35:36:32:2C:86:BE:02:B3:95:38:D3:4B:F6:E5:17:4B
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:6c:41:89:c1:0a:b9:3c:5e:16:af:f8:f0:ad:b8:09:da:
06:95:74:30:49:c5:0f:1f:05:32:26:0b:2e:76:59:98:1d:32:
6f:bc:ab:57:15:18:00:8d:65:d6:68:50:34:21:1c:d4:c1:08:
f6:7d:fa:76:0f:0c:b3:53:7b:2d:ab:21:17:f6:90:90:e8:c3:
76:0f:09:fa:3f:bf:46:b1:36:55:7b:e5:6b:a2:19:6a:59:91:
13:3b:a5:ff:28:ce:f8:14:75:6a:d3:51:74:73:e6:16:ce:3b:
d0:92:29:6a:8e:6f:38:78:0e:60:1d:a8:21:7f:85:86:b4:ab:
b3:63:cc:92:b3:ef:11:52:79:85:8f:a8:d7:4c:5a:78:ae:4b:
61:31:eb:dd:dc:6e:c5:d6:01:30:85:4a:ea:a8:ca:f1:96:ce:
fd:66:14:44:61:ac:60:10:ef:ac:bd:3e:cc:6d:62:56:7e:01:
5c:42:6b:9f:34:48:d1:b1:9d:97:a9:37:a6:06:4b:1c:de:94:
79:23:3c:33:bd:b9:00:2e:23:66:46:1e:3f:ef:3e:e3:bc:5b:
19:e9:6f:40:df:14:58:77:87:25:45:6e:38:08:ff:62:d7:4a:
aa:cd:97:4d:22:88:e5:81:8b:fd:d2:31:22:9e:22:72:a2:ce:
8c:ff:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client