Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: IkhdjCUYijQNSmDcMu17daG5BxHzI1nTF07PblLGW78=
Subject key identifier: 70:48:20:81:E1:49:C0:41:97:24:90:82:AA:20:BB:9B:34:2E:E4:A6
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019A274271AC8DF382CAF4E46C9ECCFDF82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 0352
Signing time: Mon 27 Oct 2025 20:00:57 +0000
Manifest this update: Mon 27 Oct 2025 20:00:57 +0000
Manifest next update: Tue 28 Oct 2025 20:00:57 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: wS3l0Euc5A4I23Va3AzGfDpxkFrLv+AjNolVvRMiMDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:71:ac:8d:f3:82:ca:f4:e4:6c:9e:cc:fd:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Oct 27 20:00:57 2025 GMT
Not After : Oct 28 20:00:57 2025 GMT
Subject: CN=70482081e149c04197249082aa20bb9b342ee4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:2f:13:29:2b:8a:26:6c:fa:af:ae:0e:b7:
98:b7:86:14:51:4a:0e:b7:3b:b8:51:de:2d:4c:4e:
a7:8b:d6:79:cc:9e:a1:01:63:52:2d:5a:d1:6b:6b:
65:37:6a:db:ec:d5:68:f5:58:08:3f:fa:9a:7f:b0:
17:25:62:00:67:e3:34:b2:4c:76:1a:16:a4:ce:45:
c0:fc:27:94:74:01:dd:d8:87:75:bd:45:02:20:11:
a5:14:9d:18:b0:f3:d0:c5:bd:dd:a2:50:78:75:c8:
fd:96:d7:0e:6e:c6:18:1e:36:1a:2a:8c:2f:62:8e:
79:9e:1c:51:58:8b:34:18:ca:a0:f3:13:89:bd:20:
60:98:82:73:07:a4:a0:5a:30:5c:26:82:d3:03:56:
1b:a5:76:42:55:ca:9a:22:fe:6e:7e:e8:07:59:90:
d9:f1:b9:87:e4:08:71:4e:9a:84:89:77:e7:28:68:
0a:6b:8a:c9:ee:dd:1b:aa:e1:07:d6:10:b6:bc:7d:
db:07:0e:08:15:63:86:fc:65:dc:a7:25:58:10:d5:
73:00:3f:73:0d:5d:98:f6:4c:76:db:fe:1c:37:23:
62:e3:c2:30:37:2a:a4:67:d1:95:41:8e:49:2c:25:
1b:97:15:1c:9a:1b:9b:27:10:ba:17:19:5a:3a:76:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:20:81:E1:49:C0:41:97:24:90:82:AA:20:BB:9B:34:2E:E4:A6
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:32:fd:3a:fc:22:d8:62:f7:b9:fb:21:4c:b5:67:43:a7:
07:1b:2a:e3:6a:ce:29:3d:2a:d5:57:81:0e:1d:17:cc:ce:f6:
06:08:ae:95:3a:4a:cc:80:ec:5e:b2:fd:62:5f:1a:21:66:4d:
59:ce:7e:44:6f:f8:97:91:e6:a1:f1:d9:c9:84:4a:dd:1e:0f:
f2:f0:3b:0b:a6:a2:b2:df:ac:31:d9:68:c3:f7:b8:de:e0:e7:
11:b9:84:11:db:9c:a9:fc:04:94:09:83:05:1a:37:df:25:64:
da:0a:c1:62:cb:a4:1f:6f:06:d7:a7:5e:89:74:f2:ee:f7:2c:
fc:f1:fd:2d:c7:f5:87:13:42:86:e8:24:bf:ae:61:43:7b:27:
6a:68:c0:c5:e4:57:8f:ae:c3:82:e3:1a:37:70:5f:89:00:51:
bd:66:35:5f:95:5e:87:92:87:70:ff:69:13:1f:c7:c7:b4:89:
65:4d:18:87:f7:94:fb:e2:a3:dd:e7:4b:51:4e:5b:f7:d5:37:
9d:0e:8d:10:9d:01:57:00:57:d9:81:84:8c:db:ce:c0:8e:f8:
f4:2d:15:ec:a6:30:9a:d0:e5:42:b0:24:bf:58:b3:8d:4d:f4:
e9:ff:4c:c5:48:f6:93:d9:8c:37:d2:fc:fa:4d:1b:2c:8b:73:
77:60:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:02:37 2025 by rpki-client