Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: PBYHmh/h4o4nr2hBb21ivRh53WrzkFOESm6UmLMpRlE=
Subject key identifier: 76:13:10:2D:1E:11:25:69:C1:BC:2E:D9:10:81:AE:5E:5C:49:78:A9
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019A71809DC4AA2F25ACC9142A8113B3CB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0A1A
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: BNutROi5q6qy3ofizbDsgEtotwvyYhw5b/lOZyQtxiI=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9d:c4:aa:2f:25:ac:c9:14:2a:81:13:b3:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=7613102d1e112569c1bc2ed91081ae5e5c4978a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:19:b6:b0:55:af:57:ac:44:2d:f2:a1:f9:
23:10:51:c9:31:5d:97:77:c7:85:cc:da:6c:57:30:
c4:9e:90:4e:d3:54:cf:b2:9c:53:c2:cb:56:c1:ab:
7c:0d:7f:e4:ba:92:d3:0e:5e:8f:cc:b1:3a:f9:d0:
b6:c7:ab:0d:f6:05:5a:77:9e:09:ed:74:d1:51:cf:
30:56:30:95:78:63:45:f8:83:c3:c7:52:bc:e2:6f:
b6:c0:1c:8e:6e:2c:d2:89:e5:3e:23:3f:7b:7c:6b:
2f:19:03:72:68:81:12:d6:7b:6c:41:25:72:99:88:
09:aa:9c:f0:ce:b0:8c:d3:c3:ea:22:ae:e0:89:af:
f7:f0:94:27:5c:6f:43:d2:34:04:fd:41:81:9a:dd:
c2:ee:62:4c:20:a2:5d:6c:a0:70:77:12:ea:de:68:
18:87:69:6a:42:2d:fd:e3:26:4f:aa:e6:e0:5e:cf:
c8:3f:3e:55:e6:2b:30:14:07:f3:b1:09:65:a8:67:
9f:35:b8:1a:74:51:10:f9:75:0a:69:22:a4:cf:f6:
00:e9:03:6e:09:71:27:40:ca:b6:50:a7:32:f7:7d:
62:dc:fc:f3:5c:9e:b9:24:66:57:e6:9a:e5:82:54:
62:1c:78:f3:09:b8:f2:0d:f6:48:e4:fc:d1:5f:82:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:10:2D:1E:11:25:69:C1:BC:2E:D9:10:81:AE:5E:5C:49:78:A9
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c3:15:c7:d2:af:06:4b:2b:10:6a:11:7e:41:21:3a:e5:c7:
70:12:37:cd:9c:93:d3:fb:83:ae:29:a3:c9:e5:0a:60:d9:4d:
5c:f7:08:cc:e2:d2:03:69:e0:02:2b:79:fd:4b:04:34:a5:f8:
41:51:25:34:0a:1e:de:e3:22:7b:bc:f6:cd:6f:53:b4:9e:e2:
13:df:bb:b9:7e:3f:05:46:94:45:91:f1:61:8c:e5:50:6a:4c:
59:f1:aa:0f:73:df:30:36:1f:2e:4d:96:55:65:9b:74:63:7f:
28:44:2e:94:9c:4f:08:2b:8f:75:ef:b3:f1:65:90:f1:81:36:
90:34:e4:1f:fa:b0:3e:95:44:e4:4f:fa:7f:71:88:bb:32:e5:
41:fe:85:4a:60:c7:6f:bb:48:a6:6c:56:9f:82:80:29:07:dd:
4f:ea:73:49:4e:95:cd:51:c5:3c:e3:67:59:cb:77:80:85:e4:
81:54:9f:53:9d:cc:0d:c1:c4:cc:71:ca:15:00:be:7a:78:12:
90:a9:0b:18:7c:8a:9e:75:0a:3b:9c:24:55:d9:82:15:e2:35:
be:3b:9a:ef:69:0e:c6:5d:4e:0a:d2:be:38:92:37:80:56:6c:
99:eb:af:da:75:22:23:ee:a0:a3:5a:51:36:28:66:2d:50:1c:
4a:c9:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client