Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: eUnryYHspkAMLjs0mYOxPI9OwTAZpxMYfqdCbQQeGoA=
Subject key identifier: F0:D4:99:10:2E:1B:F1:A6:A0:96:D4:B6:AE:A7:79:58:21:BA:7F:3D
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 019A70DBF9BDDC958D91990CA597E1F540B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 05FF
Signing time: Tue 11 Nov 2025 03:00:55 +0000
Manifest this update: Tue 11 Nov 2025 03:00:55 +0000
Manifest next update: Wed 12 Nov 2025 03:00:55 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: 2S279N+2ccH9jL3cbu2GRonMnI/bEfkCca8JnKvcCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f9:bd:dc:95:8d:91:99:0c:a5:97:e1:f5:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Nov 11 03:00:55 2025 GMT
Not After : Nov 12 03:00:55 2025 GMT
Subject: CN=f0d499102e1bf1a6a096d4b6aea7795821ba7f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:cd:e9:f5:d9:93:a6:51:51:3d:2c:23:f4:
66:60:5c:2f:ee:d9:be:26:64:ea:72:4a:d9:84:ed:
e6:7d:a2:93:bc:51:83:b7:9b:bd:2c:37:5b:3c:64:
3c:c7:10:41:7a:ba:8e:2c:a7:e1:51:08:76:00:d6:
4e:4b:93:4a:b6:96:ca:69:9b:b0:96:96:d7:5e:86:
70:00:33:d8:f4:98:2f:00:38:c8:ee:cc:7c:cf:5c:
96:cc:e9:4b:36:07:39:b2:a8:43:99:fa:53:2e:9d:
92:e9:2e:1a:0e:d5:87:7c:67:62:98:3f:9e:e0:45:
39:02:5a:89:d6:69:78:d5:e2:dc:64:1d:22:ea:b2:
0e:fa:e6:e5:6d:dd:fe:8d:8c:0a:7b:39:00:5e:d6:
9b:1e:82:76:74:08:ce:93:4b:45:0a:02:bb:48:f5:
32:4b:28:00:5d:87:5c:93:ae:b2:3c:0a:31:cd:0e:
05:03:46:b1:34:5b:55:19:e8:0c:ea:70:0b:c8:c1:
c9:a3:8e:2e:72:62:80:59:aa:aa:01:40:31:b8:4a:
9c:66:46:29:25:82:4a:0b:9b:70:d2:af:18:41:3c:
b0:45:52:e2:b9:99:ce:fa:a7:6f:de:68:17:b7:8e:
ec:de:9e:4b:3b:22:7a:d5:fb:cf:a0:e1:3e:51:c4:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:99:10:2E:1B:F1:A6:A0:96:D4:B6:AE:A7:79:58:21:BA:7F:3D
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:38:10:4a:54:28:a5:d2:a1:3b:a6:77:f5:00:98:86:39:04:
93:57:79:ab:b4:69:94:6b:83:34:46:af:c7:56:61:33:d1:46:
36:50:57:06:6f:3f:e8:3c:a3:89:1d:d6:08:b1:44:48:81:80:
bc:fe:25:45:43:d8:1f:a6:f4:11:be:c3:61:f3:61:ba:fb:91:
57:84:16:fa:33:8e:92:93:5e:6d:44:18:62:50:0b:bc:90:81:
69:da:48:ea:70:6e:23:5f:89:dd:4f:1e:94:97:6e:4b:df:82:
55:75:33:db:55:0a:33:8d:ca:35:eb:5b:c2:ce:70:a5:99:8d:
20:ac:ff:5e:b4:dc:b4:dd:1c:21:5b:d6:30:8e:58:eb:1e:1e:
66:77:f0:d0:29:24:ce:0a:ac:85:e7:3f:89:2f:ef:a9:65:34:
c0:0b:63:02:78:6c:14:cf:16:8a:7d:3e:ae:ed:0d:20:0e:ef:
46:b1:39:87:ae:61:01:71:50:7d:e1:e1:5e:21:57:72:7a:cb:
b1:12:51:60:b0:80:f4:0d:3c:8c:30:85:ec:4f:34:f9:35:2e:
08:ea:3d:fd:65:46:02:62:ab:d4:ba:6f:5b:1e:35:ed:8d:75:
66:7a:3c:29:1b:6c:f5:e7:32:18:a0:e4:6b:d2:c0:88:31:0c:
c2:f1:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:15 2025 by rpki-client