Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
File: 0jtkd-HIT1KQfNYMY-qD715Kx4I.mft (raw, json)
Hash identifier: QB62HDmSkXml0gmUcAyDKAXSNBTzGbHskUheFMQWmMU=
Subject key identifier: 2D:C2:93:D5:EE:41:AD:A1:7B:E7:8B:51:B2:5A:F5:46:9B:DD:44:A0
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 019A05241899B16A7054ECF4D57B2FC60EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
Manifest number: 0A33
Signing time: Tue 21 Oct 2025 05:00:42 +0000
Manifest this update: Tue 21 Oct 2025 05:00:42 +0000
Manifest next update: Wed 22 Oct 2025 05:00:42 +0000
Files and hashes: 1: 0jtkd-HIT1KQfNYMY-qD715Kx4I.crl (hash: zZN8HOp6+EoHToX8kK21BEn7GE/+Jv2OcNIVU/q9iNQ=)
2: 99RaY9xH4qOYuC0KdiJQrFMbC5E.roa (hash: TZUHN/mcHmz7AzTn504QkH94CMbEPlnfBvzJqjhXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:18:99:b1:6a:70:54:ec:f4:d5:7b:2f:c6:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Oct 21 05:00:42 2025 GMT
Not After : Oct 22 05:00:42 2025 GMT
Subject: CN=2dc293d5ee41ada17be78b51b25af5469bdd44a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:f4:42:32:d4:13:6e:60:37:91:df:a1:67:
54:ec:f2:9d:53:5c:73:c5:e7:09:d5:08:28:aa:8d:
2a:3b:e2:38:98:e7:ca:50:c8:55:a4:8a:57:be:8a:
53:4d:db:17:59:66:e2:6f:83:c6:5e:e5:94:b4:0c:
3f:79:21:a1:ac:e8:67:54:17:88:b9:31:09:ca:a0:
ff:fd:37:52:59:39:f5:11:4e:45:bf:79:c9:14:6c:
94:92:d5:d7:6e:2b:0f:06:80:dc:45:80:60:d5:93:
09:eb:09:70:3f:43:f6:bb:63:0e:2c:96:fe:d9:d1:
9e:f5:f0:8b:77:c7:9d:03:0d:01:6d:f9:ed:e8:94:
05:f2:79:a7:59:3d:a2:01:49:83:94:5e:25:3b:db:
ab:7a:cc:dd:5c:5d:40:76:23:ca:14:14:7e:62:be:
08:18:c9:40:c0:60:4c:fd:1b:4b:60:8c:b0:6b:81:
45:f7:fe:ad:b9:42:47:ca:a5:e2:00:de:a7:3e:3e:
62:f6:a1:b4:dc:8c:cc:0e:46:b3:9d:eb:90:0d:9f:
6b:f7:ee:53:b1:3e:be:f4:09:f2:61:f1:31:a5:d3:
42:86:15:c1:4b:85:76:1d:5f:0c:96:5a:64:41:7e:
fc:3c:b8:64:68:86:12:31:a6:ad:d7:36:03:bb:3e:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:93:D5:EE:41:AD:A1:7B:E7:8B:51:B2:5A:F5:46:9B:DD:44:A0
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:8b:13:0b:a2:54:92:da:e2:ad:41:52:d6:10:20:70:13:
4b:cf:6f:db:55:51:ec:d5:45:ea:7a:74:1e:a5:9a:45:8e:1d:
84:14:72:60:3f:11:4d:44:eb:54:0a:f2:c0:e9:c4:b8:ed:6f:
45:d9:bf:7f:7b:1f:5f:25:74:6a:b8:38:d8:10:dd:2b:ef:00:
fe:93:bc:7e:43:d3:e8:ca:60:8a:24:d3:5d:8a:ef:bb:0d:0f:
e7:e2:79:86:96:fe:bf:bd:77:61:d4:91:dc:86:66:e0:2e:16:
cc:5f:89:f0:80:59:d1:49:8d:94:a6:f5:c6:e7:29:18:ad:e9:
4f:1a:2b:64:b4:ad:40:b6:ad:aa:68:ee:c2:f0:e7:77:2e:35:
50:74:83:fc:8d:bc:da:96:5c:cd:86:21:9e:87:87:c1:c2:ca:
2e:a3:70:92:4b:fd:65:3e:45:09:0a:82:e1:f0:6c:74:a9:15:
97:cc:ce:cc:53:20:02:98:5f:0b:b3:c8:0e:9c:d3:58:c4:35:
2d:c8:54:6a:02:50:f3:24:c5:fb:c4:36:c6:81:3a:c9:d9:ee:
93:95:de:a5:64:60:1e:b9:09:35:11:93:d5:00:31:8a:c9:83:
11:69:2a:96:d3:76:87:64:97:ff:3a:8f:b7:ba:48:49:97:12:
22:a5:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:32 2025 by rpki-client