Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: +19A2gOtydFvVagVyjsnXw41O3kocWlwrkNcEqpM+m0=
Subject key identifier: 2A:07:16:FB:AD:AD:C3:B3:29:4B:91:D8:27:90:DF:93:52:BF:A1:78
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019A7301B3BB28FD16EA921751FD64F1A9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 10FB
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: P4/k9ONsXyhOV4tRbJWgcm8aoV48W8d7sIYrl+O7fCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b3:bb:28:fd:16:ea:92:17:51:fd:64:f1:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=2a0716fbadadc3b3294b91d82790df9352bfa178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:73:0a:f5:2f:d4:f9:25:c2:db:75:5c:75:
ce:38:83:b4:1d:02:30:e6:f0:c5:7a:4d:cf:c8:06:
ac:cc:7c:73:9c:e7:aa:07:83:94:47:f5:1d:91:b4:
01:8b:38:72:ea:5a:f2:27:eb:b5:f5:17:78:67:40:
ed:da:6b:17:1d:5f:ff:7a:8d:22:50:f9:05:01:2d:
61:7c:99:55:c2:7a:53:5d:17:75:9a:a2:c1:ba:81:
e3:96:a7:64:16:f8:c4:90:1e:07:e7:4a:e0:41:f6:
db:53:f6:5a:b7:81:12:b7:ee:2c:7c:56:3c:62:2c:
df:c3:4d:7e:89:bf:89:b6:4c:d4:80:29:6d:ce:86:
f8:2d:87:f0:3e:c3:be:b4:a1:67:b4:9c:5a:7a:0e:
47:8d:03:e7:49:07:ad:b9:46:e0:5e:b5:44:59:ac:
ac:49:c9:28:08:02:b8:c5:43:c0:d0:b7:c6:f9:87:
f8:a7:c6:10:a2:39:89:11:f7:9f:5f:55:88:ad:fa:
d6:56:9f:7a:5c:ed:2d:36:1c:04:f4:0b:00:04:96:
99:98:24:08:ce:ee:3d:4d:c7:39:b4:f2:44:5e:36:
ff:49:31:e3:70:65:f1:33:f3:2e:2e:75:b0:78:59:
a7:3f:af:c4:ca:7e:7a:92:b0:36:90:53:23:d6:a4:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:16:FB:AD:AD:C3:B3:29:4B:91:D8:27:90:DF:93:52:BF:A1:78
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:fc:13:84:4e:8a:26:d3:9c:47:43:02:a8:e3:47:e9:cf:
67:3d:a7:56:f7:dc:a4:3d:98:12:66:c0:da:95:ff:b7:b3:9e:
c0:4a:d6:dc:dc:9f:e3:4c:a0:a7:93:4f:2a:ab:32:09:d1:45:
df:52:a8:b5:d0:31:92:d0:76:82:be:94:55:36:aa:45:a7:43:
95:d9:9e:69:13:c7:c4:6a:3f:aa:a9:ef:46:83:63:d8:57:3f:
96:de:ed:dc:f0:38:ef:a6:cb:16:ac:22:94:8e:20:35:b3:6c:
3f:83:58:c2:a1:e8:4a:49:a9:16:17:35:49:a9:ae:64:5c:d3:
a6:b8:ba:6a:ce:dd:a5:d9:4d:bc:48:ed:b5:05:0c:76:a9:b9:
93:1b:4d:ee:a2:12:63:53:b6:bd:79:37:c0:ec:65:d3:8e:98:
dc:49:9a:21:48:66:9e:e4:8c:6d:e4:5e:25:7a:d6:3c:7e:0b:
d9:c1:cf:fa:d2:9e:f1:55:7b:6a:7b:bb:5d:2b:01:40:3a:0f:
da:d3:72:eb:ea:bd:6a:3e:2a:fd:c5:4e:f2:77:b5:38:44:59:
3e:c0:f6:9f:8b:7b:f1:ba:60:e5:11:7e:b1:dc:6d:6c:66:98:
3a:79:a3:e5:4b:ae:13:b3:44:7d:d4:67:6f:af:b6:d5:50:d7:
dd:4e:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:01 2025 by rpki-client