Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: RAShfKMU0nS9JAtqgnKyHYBwaLB11UyjEs+6O2mZ9UU=
Subject key identifier: 56:FE:91:50:B7:B9:36:B7:B2:69:B4:B7:D1:EB:0B:C2:42:FB:DD:1E
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0199FC58669D6220D928539D1832E84A926C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 11B2
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 50rNnFjazBYlu5lhZ-PnYemFhBU.roa (hash: TBn3PnK+MHsgG76RW1zj1H988aqSsXlA0MWIu2a6Dcs=)
2: Vt5KxzBthC81S5sv3v-peJs8Jfk.roa (hash: c9wa8mQEOam5sr33r5+tzZ9hrdt5UdjNVihhkrpnKdw=)
3: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (hash: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: 8mYYJ4cuFvUeOAy8FWcFuSAE5r9Ny0IVNM/Gvrpppws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:66:9d:62:20:d9:28:53:9d:18:32:e8:4a:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=56fe9150b7b936b7b269b4b7d1eb0bc242fbdd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:a6:07:b9:5a:79:c9:69:f2:bf:10:6c:b8:
c3:80:ea:3f:1e:0d:09:38:f3:ee:dd:9a:6a:11:19:
79:85:3c:ed:97:b6:c9:fe:82:59:93:c9:f1:2c:52:
5f:39:47:85:22:a0:2a:bc:9b:48:24:ce:dd:e9:47:
7d:0e:70:97:bc:58:3d:f3:2c:bb:a4:a3:67:d0:18:
b2:f4:ff:cc:f4:d4:5e:a0:f8:15:32:5c:37:00:9e:
07:f3:e8:b9:e5:66:66:5a:5c:c3:44:d1:38:22:19:
f9:92:ed:2d:e7:2c:d0:c0:90:3d:f8:be:78:2b:4b:
eb:61:ab:96:79:69:4b:06:84:91:6b:c9:d2:19:7b:
2e:a8:aa:9c:64:eb:0e:57:37:81:4a:04:78:85:24:
d7:90:3f:3e:f3:27:d5:95:c5:2b:69:cd:1b:4c:95:
52:79:f6:c6:22:5e:cd:64:1a:26:4d:f8:0b:3d:c9:
07:5c:f8:3b:45:dd:ef:77:ea:e2:19:db:4d:2a:4a:
b1:26:ad:29:89:56:40:9c:96:eb:3c:72:ee:7b:a6:
41:4b:8b:94:62:d0:2c:08:3f:ea:a7:e8:63:73:29:
fd:f9:eb:bc:40:8e:35:a5:11:9b:7a:16:be:dc:e0:
67:b2:d7:98:32:ca:56:c6:02:e7:69:cc:76:d5:65:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:91:50:B7:B9:36:B7:B2:69:B4:B7:D1:EB:0B:C2:42:FB:DD:1E
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:4c:3b:7d:e5:5a:0b:e6:cc:17:16:15:27:82:97:14:36:
e6:d4:c6:64:f3:a6:90:d4:60:d3:e3:37:a1:52:fd:9f:dd:83:
8f:5c:d4:f0:5c:80:1d:66:99:9f:a6:a6:50:2e:87:5d:b8:4a:
92:40:be:8d:c3:a7:8f:6b:05:43:49:71:96:41:7f:62:97:6d:
ce:72:3c:71:05:46:84:9a:04:a3:ce:82:92:be:d8:46:56:09:
cb:3c:a5:43:db:0d:2e:e5:8e:8f:12:90:2d:c6:8e:03:4b:5e:
f2:dd:71:97:ff:93:db:b4:33:5b:7a:68:40:f6:05:01:bc:73:
56:5e:a9:0f:76:cf:24:2b:4c:52:72:1f:a9:57:7e:d1:5a:3f:
0c:d4:05:be:b7:4f:97:bb:5f:50:a2:a2:e5:5e:3c:b4:ac:ae:
24:09:90:32:aa:92:05:e6:07:62:ec:2a:d4:1f:80:5c:13:0c:
93:c3:d7:f3:16:04:a5:e4:1c:03:2e:5b:2a:9b:85:0a:6f:21:
1d:f5:24:3d:f6:ff:70:c6:d7:3e:21:2e:68:23:c9:cc:66:df:
68:a1:be:85:ba:6f:1d:53:0f:74:c6:40:8e:aa:bf:90:8b:44:
6e:3c:f4:22:16:25:e0:91:bc:b7:3d:6d:f4:f1:d4:09:fa:65:
fa:05:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:44 2025 by rpki-client