Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
File: _JRi_vSVJI_b2XNCH96-IWJc3x4.mft (raw, json)
Hash identifier: HmVlKpJIAnqdrWRQyHfTdAzGNfyJOxkyRiNYUx77soc=
Subject key identifier: AA:12:6D:CC:92:FC:3A:D2:05:D0:27:18:4A:0A:13:70:C5:CE:57:6C
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Certificate issuer: /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial: 019A7293DC968E80B1617AC5EFB0FFB0ACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
Manifest number: 0839
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (hash: GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=)
2: _JRi_vSVJI_b2XNCH96-IWJc3x4.crl (hash: tt+t61HceSMTH0lOtpJx78f6fjslQzfonaWLNNvnPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:dc:96:8e:80:b1:61:7a:c5:ef:b0:ff:b0:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=aa126dcc92fc3ad205d027184a0a1370c5ce576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:68:eb:10:ba:17:3e:ec:45:c8:f7:2b:c9:
39:00:fd:74:35:ba:c2:37:93:f7:bc:08:97:38:0d:
7a:b8:0f:f7:5a:70:25:61:0d:ed:8f:4c:66:90:bb:
9b:7d:1e:73:f5:77:33:b1:23:3f:d0:6e:3f:35:e3:
01:15:06:e9:d7:03:16:c8:98:7c:e1:a9:9f:e0:a4:
24:ee:17:32:07:5d:52:84:fe:98:2e:c9:32:47:15:
bb:f1:f1:d8:90:c2:a8:4c:eb:ce:94:2b:3b:f9:33:
82:7f:92:3a:de:48:7c:65:96:90:3a:cd:06:11:92:
1c:02:79:06:db:8d:bf:cc:d8:a9:26:d8:1d:26:17:
e9:ea:df:8e:4f:07:3f:30:1c:c1:49:2c:52:d3:c9:
60:1f:7b:12:9b:b5:2f:f3:f1:76:eb:f1:22:f1:9d:
78:ce:e9:b8:ef:06:4a:91:da:9e:2e:6c:74:b5:2e:
54:e7:c9:e8:17:35:46:b9:34:6e:c9:ce:99:64:b2:
fc:60:d1:28:26:c4:37:14:aa:24:f3:99:25:52:b4:
ad:b3:23:ea:ad:05:62:f9:07:1d:8e:5f:b8:14:eb:
aa:a5:4e:ad:0a:f3:f0:6b:18:80:9c:7b:70:4a:85:
33:ee:8a:5c:73:1a:20:3d:1b:89:03:f8:a7:2b:5b:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:12:6D:CC:92:FC:3A:D2:05:D0:27:18:4A:0A:13:70:C5:CE:57:6C
X509v3 Authority Key Identifier:
keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2a:ef:ae:ad:0f:7e:57:be:28:b9:71:d5:de:63:27:73:ae:
d9:cc:bc:9e:9b:80:c2:bb:7c:cc:58:dc:92:c3:e8:76:0e:56:
c9:53:85:52:a7:3c:00:73:ff:db:56:e6:c2:c1:74:88:63:f3:
77:5f:93:b5:c9:33:f4:f6:ca:5e:a7:be:29:1f:2c:56:6f:39:
a0:23:ca:37:c2:26:1a:b6:18:b7:ec:49:e4:b0:42:ea:cc:4c:
78:37:e0:21:11:e7:e4:32:ba:e5:02:01:f4:ea:41:b1:8b:6b:
54:71:ea:5c:0c:68:05:27:f6:3b:3c:84:29:a3:c4:7a:c9:48:
38:25:52:8f:3c:8d:30:ce:59:99:87:44:de:6f:ba:14:9e:5a:
c2:62:fa:47:b3:0a:66:4b:f0:8a:98:ae:01:cb:57:22:37:68:
0f:22:45:e5:23:f5:1d:4d:3e:d6:f4:a9:76:a3:b5:e6:54:86:
73:ff:cb:b3:7e:04:42:d9:67:83:95:08:82:38:ad:51:97:4f:
62:e3:4f:24:e6:74:6a:24:f9:66:c3:24:21:88:a3:7f:4c:11:
51:91:45:e3:94:67:45:58:32:9f:5f:07:3b:ea:89:a4:6c:17:
22:09:11:c9:c2:36:82:ff:b0:1d:3f:79:e6:44:15:87:6c:ef:
2e:15:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client