Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: Ni+wuZ2nQUCdvsvEIY01UcyAVu48e1q3Lar/KfrG7kk=
Subject key identifier: 12:00:F7:AE:92:61:AD:96:9B:0D:9C:25:AE:AD:08:53:27:79:6D:F8
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019A71B8B6F12EF1DCEF1F700C48990DB1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 0583
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: jIc0D7rLayxTt/NpRihsMjvKrEURbJY9ybByuzNidSQ=)
2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b6:f1:2e:f1:dc:ef:1f:70:0c:48:99:0d:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=1200f7ae9261ad969b0d9c25aead085327796df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:75:83:08:7d:2a:50:63:10:0c:cb:40:46:
96:19:ce:36:f9:53:57:1e:e2:7c:f0:a4:d5:f7:3d:
7c:53:25:39:e6:1c:22:3f:d4:37:a0:56:5e:92:1b:
d1:f9:2f:9a:44:f4:c4:0d:d0:55:f0:f6:26:a1:05:
8a:19:16:67:de:20:9d:06:33:ea:8f:fc:29:08:ab:
78:a7:f7:8f:67:a9:f6:e4:f2:09:4f:92:02:b2:d1:
6c:04:14:ad:8b:ad:9c:38:21:5a:e9:5d:b4:5d:35:
73:c3:62:6d:f5:56:dd:c7:79:da:b5:dd:9f:2c:fc:
bb:c8:35:8e:21:b9:30:1a:5b:f4:5a:cd:3d:2a:3a:
ed:4b:33:46:5b:f6:97:00:4c:4d:3f:fe:71:15:34:
f8:7a:77:89:fa:9b:8a:b1:ce:28:22:a5:85:2d:94:
a6:17:b9:bc:1f:df:ad:e4:09:77:f0:58:cc:f2:ca:
9d:3a:c5:ee:d9:c2:c6:e5:46:aa:c5:32:81:09:1f:
6a:6f:76:51:b9:4c:6d:38:88:b5:cf:b9:68:4e:6f:
f3:e4:b9:0f:5b:58:21:34:35:46:8c:0c:3b:ad:4d:
9d:0a:5c:16:ba:99:3d:84:2c:78:a9:51:9d:df:ec:
cf:e4:a9:bb:76:59:74:41:c6:47:dc:cd:59:02:36:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:F7:AE:92:61:AD:96:9B:0D:9C:25:AE:AD:08:53:27:79:6D:F8
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:89:0f:e8:02:ec:94:28:b9:31:14:ab:39:24:00:5e:0d:41:
e5:97:ed:26:c6:75:47:1d:8a:21:99:77:ac:86:bb:09:c2:96:
da:96:b9:5d:f0:6d:b0:61:c2:70:9b:c6:2c:69:4a:53:27:c7:
fa:9a:b5:be:b1:26:18:8d:40:04:b4:d8:5f:05:5b:f3:ef:77:
bb:49:f4:e0:3d:9b:49:98:3a:aa:e2:71:33:e2:41:f1:25:8c:
e7:9e:1e:5d:68:1f:1d:ff:e0:e2:ca:82:12:5f:03:a0:3f:8f:
7a:35:d3:00:c0:31:ff:b7:78:29:6a:63:e5:1e:bd:3b:b8:85:
44:3a:6f:ce:b4:48:02:10:85:db:6b:0c:28:19:7d:bb:30:8d:
e4:fb:d7:22:b6:eb:41:b7:52:4d:c3:61:4c:e4:42:49:ef:55:
45:be:62:a8:72:a8:6f:92:7a:32:59:11:86:54:34:47:6e:e6:
42:ea:5c:90:a3:f8:ee:5f:b3:88:2f:4e:97:24:50:00:bc:bd:
c9:47:d5:ef:02:50:72:a8:cb:db:34:82:6e:87:37:4b:5c:b8:
d0:fb:a8:16:86:ea:67:27:90:15:07:0b:d3:48:95:9a:ba:49:
39:18:d4:38:ba:6f:e7:e9:7d:83:7d:cb:cd:4d:fe:94:b1:d2:
b0:fe:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client