Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier: 32YfSUZZEvpc8N+y71HK7uB8fNIOiTI7Ghvdo1Wym3E=
Subject key identifier: E1:83:04:20:C4:37:83:1B:C3:CB:C7:51:5F:31:D3:86:54:D2:58:43
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 0199FF5965B20535E6D8B273D9851EE8800B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number: 096D
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: k1ETz7gkHC4NyOvUGJ0hlqyD0rzm0oCtQD19+raCYds=)
2: 5J9wJGQ0taRuLtnFbImmMo45f_4.roa (hash: q/JovfJlsI12rHgirdt0sAWA1cHPW79Cc1hgkirK79U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:65:b2:05:35:e6:d8:b2:73:d9:85:1e:e8:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=e1830420c437831bc3cbc7515f31d38654d25843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:69:d6:e7:0c:be:3e:6a:04:c1:97:6b:dc:
33:96:dc:45:d3:e8:68:03:25:94:e0:b7:c8:a2:d9:
bf:4f:e3:fc:b6:78:65:89:d7:36:3d:4c:e4:d8:c9:
29:51:ed:2f:45:a3:85:f0:2a:38:64:ee:de:ad:1c:
25:8b:2c:69:2f:c9:65:40:88:29:5a:7b:e4:40:e1:
e5:62:35:59:5e:7e:4e:1d:b6:b7:14:b5:a9:66:e5:
69:46:8c:c1:07:fc:63:e6:f5:fd:5b:f7:ee:78:f6:
fa:af:f5:bd:e1:73:48:54:77:3b:16:58:22:c1:73:
24:7b:d4:11:ae:2a:04:b0:f5:ef:b5:82:62:8c:a0:
c3:5f:b1:fe:7a:95:02:f5:1d:c2:dd:f3:59:48:bd:
27:dd:85:24:83:0d:ef:76:58:b1:81:a4:6b:d9:07:
54:18:a1:c2:4b:b8:88:a5:d4:35:66:69:21:50:92:
6e:aa:da:3d:88:d4:a4:8a:37:2b:fa:e7:37:13:3a:
ac:9f:d9:7b:9d:d9:34:7c:bd:15:96:75:60:77:9b:
b7:26:d8:e6:3a:22:57:ff:32:fb:a3:18:21:ca:d0:
ca:62:36:c8:0c:11:a5:69:d6:f0:3d:5d:c0:5b:3d:
11:36:aa:9b:1f:b1:de:0c:6f:f0:3c:6d:4c:2c:4f:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:04:20:C4:37:83:1B:C3:CB:C7:51:5F:31:D3:86:54:D2:58:43
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:70:83:cf:61:6c:7d:ad:b5:06:55:40:68:6e:a9:a2:75:
c3:b0:5a:8a:19:0a:87:3b:5c:70:83:03:76:4d:0e:a5:d5:5c:
82:d0:24:3e:61:58:54:7d:a2:26:4e:8e:99:22:e4:b9:34:14:
c7:4e:45:e0:04:37:61:c8:84:7c:33:07:af:60:3e:1e:36:d3:
e8:80:8b:4a:35:05:24:10:fe:21:fb:34:ca:ad:b8:b9:c9:0b:
d1:73:bc:84:67:b9:fb:47:93:65:cb:14:0f:c6:58:5b:da:8c:
db:6d:20:37:1d:74:2e:ab:85:2a:88:b3:6f:5e:0e:da:3d:1a:
b4:8b:67:ef:87:9d:61:4a:00:12:2f:d2:4a:e0:22:bf:d9:15:
b1:b5:c6:67:d7:3b:0b:d3:06:ec:03:40:15:05:cb:f7:7e:c5:
96:71:5d:75:e7:ec:8d:53:d7:30:96:6c:16:53:cc:0e:c2:30:
fb:3e:4f:09:5e:fe:1a:46:bd:44:c9:11:8c:e4:12:fb:ab:df:
6c:c7:6a:48:2c:0d:39:b6:49:f0:70:a8:c7:ac:19:f3:73:a0:
e5:a2:d4:22:a4:2d:23:0e:f3:48:f1:f7:e4:15:95:9e:76:a4:
4f:e4:75:13:cb:cb:ec:1b:29:5c:8e:1e:c6:16:80:de:d7:5f:
ae:1a:82:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWWyBTXm2LJz2YUe6IALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh
ZGM5OWQwHhcNMjUxMDIwMDIwMTEyWhcNMjUxMDIxMDIwMTEyWjAzMTEwLwYDVQQD
EyhlMTgzMDQyMGM0Mzc4MzFiYzNjYmM3NTE1ZjMxZDM4NjU0ZDI1ODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Bp1ucMvj5qBMGXa9wzltxF0+ho
AyWU4LfIotm/T+P8tnhlidc2PUzk2MkpUe0vRaOF8Co4ZO7erRwliyxpL8llQIgp
WnvkQOHlYjVZXn5OHba3FLWpZuVpRozBB/xj5vX9W/fuePb6r/W94XNIVHc7Flgi
wXMke9QRrioEsPXvtYJijKDDX7H+epUC9R3C3fNZSL0n3YUkgw3vdlixgaRr2QdU
GKHCS7iIpdQ1ZmkhUJJuqto9iNSkijcr+uc3Ezqsn9l7ndk0fL0VlnVgd5u3Jtjm
OiJX/zL7oxghytDKYjbIDBGladbwPV3AWz0RNqqbH7HeDG/wPG1MLE8d3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGDBCDEN4Mbw8vHUV8x04ZU0lhDMB8GA1UdIwQY
MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt
ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw
LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8dwg89h
bH2ttQZVQGhuqaJ1w7BaihkKhztccIMDdk0OpdVcgtAkPmFYVH2iJk6OmSLkuTQU
x05F4AQ3YciEfDMHr2A+HjbT6ICLSjUFJBD+Ifs0yq24uckL0XO8hGe5+0eTZcsU
D8ZYW9qM220gNx10LquFKoizb14O2j0atItn74edYUoAEi/SSuAiv9kVsbXGZ9c7
C9MG7ANAFQXL937FlnFddefsjVPXMJZsFlPMDsIw+z5PCV7+Gka9RMkRjOQS+6vf
bMdqSCwNObZJ8HCox6wZ83Og5aLUIqQtIw7zSPH35BWVnnakT+R1E8vL7BspXI4e
xhaA3tdfrhqC/A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:28 2025 by rpki-client