Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: wk5MqmCzhYYtVXYwFUcuioJudZc03X6WJspXhaQN3GY=
Subject key identifier: 1F:8F:96:19:A6:D9:65:E4:76:8A:BB:D1:C5:2A:68:A9:09:81:18:C4
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 019A706DFFE6752DB74D64AF0C22EF8E52C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 0791
Signing time: Tue 11 Nov 2025 01:00:48 +0000
Manifest this update: Tue 11 Nov 2025 01:00:48 +0000
Manifest next update: Wed 12 Nov 2025 01:00:48 +0000
Files and hashes: 1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: MhI1qeRvaM8bdwG0lLuRed6RR6hr0lXS5TETngMAlPc=)
2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ff:e6:75:2d:b7:4d:64:af:0c:22:ef:8e:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Nov 11 01:00:48 2025 GMT
Not After : Nov 12 01:00:48 2025 GMT
Subject: CN=1f8f9619a6d965e4768abbd1c52a68a9098118c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:ab:54:6b:de:4c:37:7f:ed:d0:38:fb:41:
8c:7b:27:35:3e:27:14:0f:7a:8c:d5:95:ba:bb:00:
e0:58:8c:8e:6a:5b:67:05:76:ae:c4:97:9b:6b:b4:
1c:16:9b:cd:87:78:96:46:18:6a:5d:95:b9:6c:90:
81:0a:6d:8c:49:5d:aa:57:a7:13:39:35:3d:d0:f8:
23:5b:2b:e3:8c:7e:d8:9e:7b:71:ae:cf:96:8a:97:
b3:57:46:18:43:5b:aa:aa:6f:fb:77:91:26:65:38:
5f:f8:28:35:be:95:91:57:02:9e:2b:a8:5b:2c:50:
fe:b5:62:4c:19:a9:84:dc:b5:10:0a:d9:29:9a:09:
c0:9f:a2:f6:26:a5:e1:7e:c1:04:8f:60:e1:4e:a6:
61:df:cd:04:f6:31:16:f6:7e:2e:49:82:d1:d3:e1:
3d:72:24:bf:5d:a6:d4:ac:ab:0e:8a:4a:30:8b:32:
ce:24:21:17:53:34:da:30:4a:86:0a:4e:b5:06:b3:
bd:ee:78:a9:dd:d2:00:d5:58:6d:2b:4f:48:82:42:
5b:05:d8:5e:58:73:80:6b:dc:4b:39:60:55:2e:5f:
bb:bf:ad:15:34:90:03:c6:a7:74:00:b7:8f:29:b0:
50:3c:05:53:7e:70:06:19:f7:89:00:7d:55:3d:3f:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:96:19:A6:D9:65:E4:76:8A:BB:D1:C5:2A:68:A9:09:81:18:C4
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:5b:72:67:21:87:e6:12:17:d0:18:06:a7:3e:17:e6:a7:
fc:2b:70:8a:f0:b9:f5:0c:ee:ea:19:3f:e1:4d:88:16:3d:e4:
da:2c:3a:fc:0a:96:ff:53:06:96:f6:56:be:88:2b:a0:a5:83:
6f:7f:1a:a1:57:ee:b7:40:4b:ae:28:b2:44:de:f8:c4:ee:db:
8f:2b:ba:e7:f1:bf:32:a3:4c:91:01:ac:ea:01:dc:8c:69:92:
62:2c:14:b9:fa:3c:0c:30:d2:37:89:3f:23:00:21:ae:4f:a4:
e8:90:97:bd:c6:df:2d:45:9b:4d:92:fb:97:40:bb:a4:26:e2:
c5:f3:ed:78:e1:99:45:2a:5d:5f:c5:a6:c6:c5:f6:16:ce:3e:
8f:13:40:50:28:f2:e8:d8:60:ec:84:d7:92:1c:96:67:a4:10:
f9:af:b6:15:3b:6d:cb:b6:24:c0:b9:b3:01:d1:97:78:a8:48:
2c:81:8c:a5:f9:9e:b7:9b:10:48:28:c6:54:7a:48:e6:79:bf:
84:55:dd:9a:24:6e:21:30:de:35:c8:60:c3:e8:5e:fa:cb:e6:
82:21:4b:9a:49:d8:87:c0:f8:87:0d:c3:6a:90:23:3f:b4:7b:
b0:80:50:44:05:03:25:b2:df:07:eb:df:58:78:d8:96:ac:3f:
e4:c1:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client