Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: EoqNUjozQh+Adxkp2JVUfuHY/yVg+fEzTmLNMKIVDok=
Subject key identifier: 10:92:0B:7A:CA:98:E2:3A:33:2A:5B:43:30:4B:D0:40:26:22:56:CC
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019A70A57486E2C1134C83322E20C621AD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 0F3B
Signing time: Tue 11 Nov 2025 02:01:22 +0000
Manifest this update: Tue 11 Nov 2025 02:01:22 +0000
Manifest next update: Wed 12 Nov 2025 02:01:22 +0000
Files and hashes: 1: 0NQ-WA07ivHNbBCHB8RlQLxAoLU.roa (hash: yrHnQMXQ6Qe+mkwHNhl6sEUBZtgafrbZ/F8WnR+E6Bs=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: Hptj5Eqq2eq/YX+2ZllBpSPFpqUyAYQ3VmzkTrhJvbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:74:86:e2:c1:13:4c:83:32:2e:20:c6:21:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Nov 11 02:01:22 2025 GMT
Not After : Nov 12 02:01:22 2025 GMT
Subject: CN=10920b7aca98e23a332a5b43304bd040262256cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:95:fb:29:3c:ec:50:58:19:6b:e3:cc:29:
9f:c2:cc:af:a4:23:6d:5e:26:d7:22:a4:4a:7c:41:
a5:53:fd:90:cf:9e:ea:da:0c:c3:51:c1:aa:40:2f:
e8:4e:12:4a:e8:ce:f6:87:bd:56:7d:82:ff:77:8d:
98:73:9a:83:fb:cb:6c:82:e7:7a:a7:dc:07:b4:b8:
61:a5:72:94:6a:90:de:05:aa:ce:58:5d:91:f3:a2:
70:a3:61:24:88:ac:fd:50:03:8a:bf:2c:13:7f:3c:
3a:f6:04:f4:d4:df:ba:7a:71:cf:bf:8f:6c:2e:af:
72:a8:62:6e:ab:bc:ed:da:6b:d9:8d:57:3e:73:e3:
5d:f4:ce:0f:44:5c:03:0e:b8:93:35:bc:7e:9c:26:
83:bc:2d:66:7f:1f:ac:74:3c:48:d6:69:3a:f5:b2:
93:6e:a6:ae:04:fa:6c:c9:6e:51:3e:c9:42:6e:b2:
3e:25:d8:bb:6d:8d:63:98:72:d8:98:49:cf:92:77:
5d:6e:25:2d:fc:a8:21:33:a1:2a:90:63:f3:7d:96:
86:67:04:c4:7a:5d:22:be:07:67:ed:86:d0:12:27:
a3:52:09:ed:39:b1:45:81:cc:e3:04:b1:26:fd:04:
81:53:08:4a:0c:9b:45:c1:5a:a9:70:af:45:72:a6:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:0B:7A:CA:98:E2:3A:33:2A:5B:43:30:4B:D0:40:26:22:56:CC
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:17:a2:11:8f:2e:5e:03:f6:68:db:2c:bb:32:e9:e1:ad:
08:a3:81:75:5c:c0:cb:95:f0:f2:04:55:8e:11:44:6b:c5:77:
0c:db:d0:f8:0c:55:2d:9e:66:07:9b:03:fa:1a:92:b3:e0:bb:
6f:ef:f1:03:5f:c6:5b:1e:a2:d6:4c:ea:cc:42:16:22:5b:f6:
8c:c1:85:2c:b5:3f:ae:b7:84:85:cb:a7:bd:f0:89:dc:71:22:
a7:16:4f:b5:b7:22:60:73:8c:a6:c4:f6:2d:7d:d1:e4:d2:6d:
97:89:c4:b8:64:14:ac:24:1f:73:f2:dc:6e:8a:d8:03:c1:0c:
12:be:20:c1:81:99:98:ca:53:02:f5:be:df:83:a2:49:19:08:
15:93:7e:cb:66:cb:2f:52:34:72:9e:1c:06:d6:68:db:74:78:
75:90:23:55:13:71:be:c3:3f:76:21:3d:5a:94:0f:e4:e1:03:
8e:4c:20:7a:90:55:ff:1f:4f:16:10:ef:3c:f7:7a:af:bb:c0:
9f:ec:8d:72:99:13:fa:fe:35:d0:d5:49:ed:4a:c1:50:d8:89:
c0:ae:32:64:00:73:02:a7:69:f3:45:af:37:1c:c5:71:d1:6a:
94:40:ef:d2:32:d0:53:6c:1c:e6:15:9a:71:b8:f4:bd:07:2a:
3e:36:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:36:56 2025 by rpki-client