Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: Xr+tkgZ88USnX7o61ZzErP/0WUnF4vneCo2oYg3IJ90=
Subject key identifier: 28:91:96:41:59:B5:64:7D:E2:0C:02:BD:8C:09:CB:AE:8D:91:E3:95
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019A71B78B48B80BF0A6546269108A95CA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0DF1
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: bxouBG6VC/VU6C167h4tiubpN3urfFL+I6+PmVkjHCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8b:48:b8:0b:f0:a6:54:62:69:10:8a:95:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=2891964159b5647de20c02bd8c09cbae8d91e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:a9:f2:d5:19:ea:24:4b:bc:aa:85:a5:38:
f7:3a:70:1a:39:57:e2:52:68:4e:1a:7c:74:20:45:
2a:9b:7d:c7:19:90:07:6e:6a:e7:76:2e:a6:06:24:
0d:ce:81:11:58:e7:7b:cb:8c:2b:b7:e0:2d:f2:a3:
28:82:b7:40:59:4a:d8:2b:b3:5a:14:f7:06:2a:8d:
53:6f:ee:e6:d4:27:0c:63:8a:b2:ab:b3:5e:da:6c:
b9:04:0a:6d:4b:90:5f:1f:ef:0f:63:48:6c:57:9c:
de:67:3e:a1:82:43:ca:73:ac:54:e2:87:ee:32:f9:
3d:bc:45:c5:d6:70:c1:f4:b0:1f:f1:c5:7b:e0:04:
c5:64:93:63:3f:46:33:ef:57:b6:cc:e1:ba:68:19:
fb:1f:31:b4:91:ce:e1:76:ae:01:e7:c6:17:ee:58:
a9:e6:50:ee:5f:9f:83:05:1e:bf:a8:b4:f3:56:f7:
0d:c7:68:6d:79:6e:ee:72:0a:e9:51:59:93:ca:57:
a2:f0:89:74:19:2b:04:7f:53:5d:e9:60:39:e2:9d:
ee:3c:8d:ac:66:5f:a5:f7:4d:de:f1:60:f2:46:37:
f3:f4:07:6c:fb:dd:74:b4:29:c3:ce:c6:d0:14:33:
de:a1:f2:74:98:ff:b5:c9:e0:14:2c:6f:4f:00:64:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:96:41:59:B5:64:7D:E2:0C:02:BD:8C:09:CB:AE:8D:91:E3:95
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:ba:b8:16:5c:32:aa:d9:f5:85:65:d8:cd:e4:c9:3e:3b:
5b:c3:20:7e:03:32:b6:4b:3d:c2:92:b1:ff:0e:ac:f9:a5:e0:
e8:e4:b8:dc:31:42:4d:6c:1f:fe:7e:a7:0d:e5:05:45:57:48:
38:d5:43:37:2e:c8:c0:28:20:aa:c7:e2:2a:bc:4f:68:68:14:
33:2d:f9:99:5d:b4:05:c5:3b:46:5a:39:26:94:bd:dc:59:0e:
33:85:e7:87:45:89:03:20:73:49:f2:4d:00:8f:fb:a1:93:f4:
af:9c:ed:fa:34:6a:c4:b7:01:1e:b4:46:43:99:f0:99:ef:dd:
ba:c4:d8:04:53:29:e9:eb:58:20:b2:27:61:0a:e2:ff:b5:8d:
f6:75:50:9d:e8:87:76:dc:5e:ee:bb:51:2e:88:c7:f9:d9:99:
3e:8c:47:a1:91:7b:b6:d3:93:79:1b:09:8e:ad:b3:33:6a:ad:
b1:1e:39:08:a5:41:e5:ea:ef:8a:e7:5a:81:9d:00:c2:fa:14:
12:b1:a0:ac:fd:35:10:fd:bd:82:c7:2e:f4:d7:1b:06:81:43:
60:66:57:13:ef:1f:4d:e3:0c:1f:7e:7b:83:4a:5a:27:91:eb:
80:cc:ac:1c:9e:14:4f:2b:85:f2:05:7b:90:d4:c3:7c:5d:64:
8c:de:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:40 2025 by rpki-client