Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
File: jO6IBP9wN24q_iGr-T4ijVr91Qk.mft (raw, json)
Hash identifier: Jrn8yD2u7S67WrwOgkOaAPO2PXIgiHNxrlvojPByvlA=
Subject key identifier: 4B:10:98:D0:47:72:6D:F4:0B:D7:F2:28:BD:29:7B:8C:50:ED:C2:38
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Certificate issuer: /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial: 019A72CA660ED77CD57486701084CE8884DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: ZW-bLN7mpwXCPTSQ0v5aAVoTu8g.roa (hash: E10KwVeqHj4J7myzFFX6atSdaz21CXH8tahheXJigm0=)
2: jO6IBP9wN24q_iGr-T4ijVr91Qk.crl (hash: GSsUgg+UXWGp5ZKXKGuFeu44PaldaAzJNZfuWix2mbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:66:0e:d7:7c:d5:74:86:70:10:84:ce:88:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=4b1098d047726df40bd7f228bd297b8c50edc238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:4d:55:4f:dd:07:85:2d:4b:32:41:a1:d2:
1f:7f:d8:02:24:bf:16:bb:3c:e9:9b:3a:c0:cc:fe:
01:d3:28:1c:cc:15:c3:23:a9:1d:07:ad:b9:08:81:
74:da:bb:e3:5d:da:0c:c6:41:7e:c2:b9:6d:ed:f5:
e1:d2:c6:25:b2:32:70:86:69:14:32:6a:2a:47:de:
76:fe:9b:3e:fb:95:4c:08:d5:c2:db:11:8a:75:5b:
10:4b:e2:53:ea:9d:36:71:f3:42:6d:3b:0f:be:ce:
5a:69:e2:60:48:8f:24:ad:17:f2:11:73:e6:cc:b8:
e3:85:7a:d0:fc:82:a3:c7:4e:96:44:d8:c8:4b:e2:
68:8e:cb:9b:33:f9:c9:e6:87:a6:b0:f2:d5:3e:72:
78:4c:41:40:f1:82:db:3b:99:10:20:2c:a0:4e:32:
97:73:19:ef:d3:65:a7:3e:34:bb:87:c8:cd:63:73:
97:ee:f9:87:3d:68:b8:05:2b:5d:fd:03:f3:d5:30:
a6:60:24:1f:b5:35:d5:41:fd:fb:0e:44:86:96:94:
91:c5:72:ee:24:31:87:c8:af:89:15:79:57:16:d5:
9a:4f:ea:a8:48:c4:5d:18:71:40:1c:bd:71:05:ae:
71:f3:fe:57:22:c2:58:be:7c:6e:61:8c:e2:c3:ce:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:98:D0:47:72:6D:F4:0B:D7:F2:28:BD:29:7B:8C:50:ED:C2:38
X509v3 Authority Key Identifier:
keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:39:3a:d6:bf:f7:6c:27:1a:57:69:12:12:0f:ee:25:f4:
90:94:4f:5a:8e:09:db:de:f4:f5:13:f5:12:29:2f:ae:63:c9:
89:9a:09:10:16:cf:09:77:83:61:a4:38:47:2e:4f:29:a1:39:
b4:11:8a:6b:fc:7e:4f:3d:fe:c9:88:29:c5:fd:78:ea:11:99:
ca:51:0d:2e:34:14:77:c3:ba:48:c9:4b:e3:0f:49:b6:c9:af:
fe:38:c1:7f:13:4a:5c:79:4e:5a:0b:e9:5b:1f:56:93:6f:79:
b3:bc:e9:64:15:41:b4:f2:a5:10:60:ca:ba:0e:e7:76:2f:a6:
5f:ef:04:1a:ac:54:94:6f:aa:0e:3c:01:f2:fc:16:16:09:9c:
11:cc:68:bb:a0:25:6f:57:bb:0a:0b:0e:be:48:c0:df:56:33:
0a:1d:3d:bf:d9:e5:2c:44:9f:3c:15:fa:88:aa:c5:5a:bc:e4:
4f:12:07:3e:4f:ad:18:d9:32:8f:a0:59:23:8f:a6:74:ae:b5:
32:68:0f:4f:5e:46:a8:76:0e:bf:d1:d0:f2:35:3f:e2:05:35:
3a:cd:e6:66:62:0b:d9:6a:b8:b8:8e:ea:ec:9d:df:34:bb:5c:
3f:e4:eb:6c:73:01:ef:dc:d8:51:cd:31:f3:ea:46:59:ca:23:
ed:a1:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:41 2025 by rpki-client