Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: N6CXv0GdOrjZbmfPB2wz5+SRoyOzGgIFFDAbuaneKyw=
Subject key identifier: AD:3E:11:8C:FD:E4:BA:04:18:0D:1D:9A:C3:CB:1D:C5:88:E9:45:B3
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019A3EA5B8D95D4A13B754AFC3ECC481D733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 06C0
Signing time: Sat 01 Nov 2025 09:00:39 +0000
Manifest this update: Sat 01 Nov 2025 09:00:39 +0000
Manifest next update: Sun 02 Nov 2025 09:00:39 +0000
Files and hashes: 1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: mHvdJ9qbm8jwYhMvBIRMbVmTzz74yUVsyO2O+6HA7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:a5:b8:d9:5d:4a:13:b7:54:af:c3:ec:c4:81:d7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Nov 1 09:00:39 2025 GMT
Not After : Nov 2 09:00:39 2025 GMT
Subject: CN=ad3e118cfde4ba04180d1d9ac3cb1dc588e945b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:dc:80:dc:77:e4:4f:de:70:d2:91:2b:0d:
05:2d:62:f5:ab:75:1f:af:d9:f3:b0:89:ca:cc:c2:
68:71:05:61:e2:34:e4:47:21:fa:9d:94:17:7a:75:
74:7d:f4:49:b9:3d:26:81:01:04:79:99:2e:d9:4c:
2f:3d:68:b9:ab:d4:1b:47:9b:1d:d6:2d:6a:5e:41:
4d:d1:9b:e0:ee:47:07:5d:03:1e:e5:51:a3:77:2a:
a9:2b:88:11:6e:87:de:9b:c8:2d:3a:46:2b:12:b0:
ab:31:96:5f:00:e8:92:a5:6c:20:b2:b6:ce:b5:b9:
ba:36:85:0e:3c:42:f7:79:ae:d4:71:ed:da:a8:17:
75:38:56:5c:b2:96:cd:2e:d6:86:89:21:c4:26:b2:
6a:61:32:5e:c8:7e:01:a3:ef:12:bb:6d:3a:b6:e8:
2f:06:d0:aa:c5:09:db:fa:73:ad:2f:7a:8c:d5:1c:
26:2a:7c:1b:8a:90:df:99:f1:ff:ae:32:06:02:bc:
31:cd:56:56:29:7e:f0:d0:b8:f1:4f:0f:dd:fa:d0:
6a:1f:d3:b8:f5:90:cc:0f:b3:9f:56:ab:4e:56:e0:
b2:e2:0d:06:21:b2:54:6c:7f:b3:2c:dc:2e:7b:b5:
36:20:a6:39:91:65:3d:70:e5:8b:52:ed:d7:72:28:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:11:8C:FD:E4:BA:04:18:0D:1D:9A:C3:CB:1D:C5:88:E9:45:B3
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:84:a9:f8:8d:32:03:2e:9a:bb:22:cb:29:a1:29:7d:c1:
7b:91:d4:82:e1:38:57:d0:8c:43:14:05:a0:95:e1:cb:e5:e0:
cc:af:c1:10:31:1c:29:9a:49:c1:95:4f:be:3c:69:54:54:11:
5d:18:61:10:17:42:6f:fe:9d:e6:14:24:22:da:71:f4:d2:74:
fc:aa:48:25:29:4a:9f:1c:de:42:4b:dd:6b:24:cb:c2:5f:a8:
71:d1:b1:e6:83:31:22:cb:c3:da:09:bf:69:57:09:0e:c2:82:
7d:a6:3f:01:f4:44:90:66:d9:b1:96:e8:3e:d3:ef:c1:2d:86:
64:71:63:06:84:8a:7b:a9:99:03:21:96:49:68:44:2b:49:2d:
a1:8d:b3:2e:9c:a8:b8:3f:09:f3:fd:46:bd:83:fd:1a:f4:88:
b5:82:02:a5:42:16:5a:16:48:68:a2:64:37:73:cd:69:aa:b4:
26:8c:2d:b0:7b:0c:69:23:f7:e8:94:8a:76:c5:e8:bc:76:9d:
e6:35:33:45:b7:fd:51:b2:b4:4c:5d:02:f6:e2:6a:65:89:b9:
04:ec:e5:4d:ad:86:f8:f2:06:57:41:09:b8:06:ca:53:2b:5c:
2d:37:64:c3:83:dd:0d:1e:f3:ae:76:a7:d9:08:52:3e:8e:24:
c9:6b:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:17:37 2025 by rpki-client