Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier: 0mMKk6ovKrzSAqLs07UuKIGprY9+Z/ewu7yL8hwTO2Y=
Subject key identifier: 4B:2C:42:83:23:25:35:29:A9:C8:42:AF:40:95:CE:36:B5:2B:64:1E
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial: 019A72CA8098DCC37406E38A3D504364035E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number: 124B
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: Z2IFPfj7pnpqvzdBdaAHh+TS+5Dmg4gIWAeop5357hc=)
2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:80:98:dc:c3:74:06:e3:8a:3d:50:43:64:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=4b2c428323253529a9c842af4095ce36b52b641e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:c2:d8:36:19:65:83:68:c5:3b:8d:6c:e4:
7d:df:17:85:a5:ca:0e:67:2c:e8:3d:18:33:87:95:
e5:58:96:d4:92:b6:a6:b4:9d:f1:55:c4:13:95:c0:
95:ce:55:4c:0e:b0:6f:7f:de:18:67:21:41:eb:90:
cf:d2:a0:fe:e3:56:0e:06:53:c9:d7:c9:f9:82:99:
28:78:b5:95:bc:cb:4c:05:c2:e4:17:58:f8:8a:e9:
27:a3:87:19:fa:73:97:05:77:4f:9d:c0:f7:bc:10:
6d:39:ae:ad:c7:4a:16:9a:08:74:84:b3:77:61:6c:
8b:87:c2:1e:0a:fe:4f:bb:59:d7:3f:f3:97:21:2f:
fd:c2:6c:73:1b:7a:e3:68:4c:83:b4:d2:27:d9:a3:
8f:7a:4b:3e:1d:96:3d:e4:f2:bc:2d:d5:66:15:9c:
24:e6:07:f2:6d:70:77:71:6d:38:8f:af:94:e6:d3:
71:97:6e:ca:2f:45:3e:a1:2f:d1:72:45:66:38:25:
f8:d2:8a:ee:13:a6:9e:bc:ce:f5:09:d9:aa:eb:20:
f0:80:c5:7b:64:02:ef:52:0e:17:8b:54:23:61:d1:
e3:b2:1c:d0:c7:30:d6:c8:10:1e:81:03:4c:60:5e:
83:81:66:c4:72:b3:5c:62:99:1b:7c:19:ff:d9:c3:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:42:83:23:25:35:29:A9:C8:42:AF:40:95:CE:36:B5:2B:64:1E
X509v3 Authority Key Identifier:
keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:37:80:93:dc:87:9e:d4:2c:0b:1f:f8:ae:6e:e0:62:c1:
67:86:74:c0:77:4e:7e:52:fb:b7:d5:fe:96:f9:40:17:af:eb:
9a:68:43:bb:fa:31:85:75:c4:51:d9:d3:72:86:d0:95:d5:17:
5e:10:57:20:b2:19:6b:d6:40:14:4f:83:be:6e:89:eb:58:fa:
bd:54:f4:2b:6a:70:ce:bd:c1:32:1f:14:57:5f:cf:27:8e:57:
cf:fa:cd:d0:77:8f:27:e3:92:96:66:ef:3a:4e:f0:41:d5:c7:
c4:65:5a:45:c2:3c:2e:32:84:f3:19:b4:4e:33:38:1c:5a:1a:
d4:80:23:31:e9:32:94:49:38:2f:ca:4f:fb:86:1a:c7:06:a7:
e3:41:85:5d:58:60:77:5e:97:97:e8:2d:12:d5:15:e8:0f:b1:
80:bc:73:37:67:40:11:fe:db:b5:3a:2f:bd:8a:06:7e:06:cc:
95:c5:08:b1:cb:2e:1a:34:57:0f:eb:5b:56:50:7e:ed:b6:6b:
51:b6:8b:84:8c:95:0a:9c:34:7f:f0:00:9c:73:b5:0b:b1:5b:
10:6d:e7:eb:c2:86:e5:97:7b:b8:56:91:ae:dc:84:e4:62:40:
8e:8d:4d:02:aa:02:d1:ad:73:17:cf:de:74:22:da:85:49:8d:
de:5b:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:58 2025 by rpki-client