Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: GYnyF4W9cROxRqBcbtN5BcSmC8y7BDmVZv2IJEBFBpc=
Subject key identifier: 39:9A:72:6F:E6:D9:FA:16:8E:F1:D6:A8:A2:18:33:C2:25:7E:00:D1
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019A7149AFB3166156A1FF62B4C668CB869B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0B96
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: uKzT0/8MFfFeIGEOohOZR6iLdBGCnXMbPB8WTt7DbVs=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:af:b3:16:61:56:a1:ff:62:b4:c6:68:cb:86:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=399a726fe6d9fa168ef1d6a8a21833c2257e00d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:7b:78:1c:cd:dc:b2:07:29:1d:42:cd:6b:
46:98:c0:4e:9c:26:d6:b3:06:8d:55:2c:b6:c0:63:
99:f9:0d:78:1a:f7:da:2c:5b:a5:08:b4:c9:91:46:
32:97:b8:b2:4b:05:08:84:98:00:2e:b4:f9:d8:5e:
8f:33:9b:b6:57:67:05:16:b5:02:a5:79:77:a2:d4:
8b:c7:84:57:fd:ff:5b:6a:a8:f2:35:b8:79:de:a0:
af:f0:07:38:14:bd:37:4f:a9:6d:2b:dc:46:ea:ae:
df:b2:21:fe:a5:28:2f:30:ab:25:b7:dc:0f:c1:e5:
50:95:5a:0b:52:bf:b1:04:e7:86:31:95:f0:74:10:
db:ad:b4:37:a1:6c:5f:16:61:e7:66:7f:1d:f4:f1:
ad:fc:81:1a:28:7e:7c:8e:e9:6a:5c:2b:50:0c:03:
05:61:3b:28:da:f3:43:01:6b:68:74:60:d4:6b:74:
88:14:db:18:a8:ae:8b:87:30:c8:95:be:ef:50:59:
81:50:20:42:7f:d9:54:f9:74:b2:a9:e1:5a:e9:43:
72:64:09:b5:3f:c4:98:7a:82:e8:e0:fe:bf:0e:04:
4f:dc:06:42:da:cb:67:6d:0f:4a:ad:99:56:1a:8b:
fd:d4:5e:d8:9a:d6:0e:24:59:5d:10:cd:42:5b:83:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:72:6F:E6:D9:FA:16:8E:F1:D6:A8:A2:18:33:C2:25:7E:00:D1
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:0f:b2:3d:6e:f7:f0:04:c0:1d:f4:28:fd:a1:7a:da:48:
b9:a5:15:8d:43:4a:b6:86:84:71:b1:ed:a5:57:27:e5:68:02:
46:8e:bb:ee:fe:31:f6:38:5e:65:cf:5a:5b:7d:4a:80:cd:77:
78:a1:9d:24:36:40:78:a0:6e:03:36:21:64:a5:b3:71:f7:fd:
d8:9c:4b:1e:97:27:7c:6b:6f:ec:0c:5c:6a:23:3f:ec:4f:2e:
6a:3e:13:84:78:08:f4:a9:64:5f:5a:59:c9:a2:b2:d1:ac:24:
8c:84:6e:96:9d:ac:47:f4:c5:af:e0:7b:53:63:c5:f3:94:cb:
51:ae:4c:5d:eb:a9:78:77:2a:12:f0:4f:7d:b3:82:5c:2e:7f:
73:1a:09:9b:7c:be:c0:55:bb:17:75:38:c8:97:13:01:a6:6c:
43:79:8b:0e:97:c0:e4:c5:97:fd:19:83:ad:53:95:8f:34:56:
7f:bd:64:61:61:2f:05:86:d3:49:48:0c:d1:77:8a:63:98:ad:
f9:60:a6:8a:56:bf:14:8f:ef:cc:d2:0b:9a:28:76:27:64:c6:
2e:2f:87:11:49:aa:d6:38:de:89:e5:89:d8:c3:da:7b:99:ff:
41:28:a9:f3:30:8d:2d:77:56:53:84:85:b2:ec:5c:a2:ea:97:
58:4c:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:33 2025 by rpki-client