Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: HE6Vz/n1gLCMJbjY5JLw7aXIOEudJMXUeLDov/M1c/U=
Subject key identifier: C3:FC:4A:04:9F:47:87:55:07:13:6F:92:05:CB:56:D2:76:DC:F0:77
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019A7149E397F6F0598FFD89C7FB86059FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 1301
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: o/Qi2GuSJqp5Gpj6zq/E+WevO10NNKngA5cnQjbMhWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e3:97:f6:f0:59:8f:fd:89:c7:fb:86:05:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=c3fc4a049f47875507136f9205cb56d276dcf077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:52:46:9a:2c:9e:7f:b2:7e:54:ab:10:61:
9b:39:16:aa:47:9c:ca:51:a1:dd:4f:de:27:c0:fa:
27:dc:7d:a8:21:0a:a9:2d:e1:f3:fa:44:0b:80:ce:
22:e5:a1:1b:4a:5e:a9:52:6d:f8:a2:ac:5b:02:79:
69:68:48:73:5f:28:85:97:df:78:55:d0:2f:bc:74:
01:bd:35:de:1f:fd:59:6f:db:17:0b:b4:8f:5a:ed:
80:b2:6a:39:49:64:3e:a6:88:4b:78:b4:57:05:d8:
e6:9b:71:dd:71:a0:af:01:ae:bc:ca:c8:fb:cd:60:
5f:6f:c7:23:8a:3f:b6:b3:d3:81:b5:84:2e:a4:b3:
58:6d:30:e9:6a:85:4a:30:e3:ee:7f:46:b6:16:a5:
8d:41:37:22:96:38:1b:45:ab:20:22:78:a0:8d:60:
e5:ab:6b:f1:b7:5f:b7:c4:42:d7:79:27:c8:1b:ae:
f4:94:1d:c9:41:58:4f:14:17:fa:c8:b7:b3:86:d8:
40:ba:5f:ec:be:68:cf:2d:a6:6c:af:0d:5b:13:bb:
89:85:db:8e:85:05:22:5d:7b:70:c6:24:d1:b7:2d:
6c:dc:a0:3b:aa:01:56:83:8a:0c:ea:4b:fc:5c:f8:
ee:97:60:b8:12:74:09:d8:72:2d:1a:11:e2:01:5e:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:4A:04:9F:47:87:55:07:13:6F:92:05:CB:56:D2:76:DC:F0:77
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:03:32:df:7d:aa:c6:1c:fe:fc:0c:80:44:7a:59:08:a9:
18:25:8b:82:e2:4d:e1:45:e0:6c:c1:c4:c8:84:e5:b9:9b:de:
aa:96:cb:f6:52:11:69:f4:6c:3f:ed:fc:b5:cb:fc:68:ec:80:
b8:60:45:e0:9a:b9:f1:7f:7f:cf:3f:70:87:e1:be:1d:fc:ea:
2a:dc:8f:65:b6:3a:ec:60:8a:fc:c9:ac:ff:d7:d0:5c:77:6a:
c1:1e:08:37:c3:dd:b2:c8:07:9a:61:7a:f0:b4:4b:02:1d:f5:
34:a2:1a:a3:aa:23:41:8c:4f:e9:63:50:2f:f6:bb:29:51:6b:
3c:8d:0e:6c:31:b9:ac:51:9b:f7:20:58:40:e7:06:50:c4:51:
9d:4e:44:38:2a:e2:81:27:97:b3:12:6e:d2:98:43:32:b1:97:
ff:6a:63:9a:f3:24:12:dc:b3:a2:79:75:fa:9d:de:75:a1:ce:
6d:9a:db:57:1d:f2:94:5d:23:2d:55:db:83:f0:96:9c:0a:2d:
6c:c3:64:70:75:b2:d7:ea:6d:b3:64:84:30:4c:f1:48:85:d3:
c5:e0:62:ce:bb:0e:85:a7:f0:3c:b6:55:26:d1:98:04:28:17:
5d:86:40:e0:29:60:7c:b2:8f:6a:b7:f2:a8:9b:c5:35:4b:53:
6b:29:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client