Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: oFNf08PMJ5VdviCy4+DbybrjnoqWmFVUq2C1n1A8ogk=
Subject key identifier: 9B:4D:EB:4E:18:91:8C:79:12:FF:5C:01:2B:83:8E:25:B5:28:F7:1B
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 019A036C20ABA29513EF484C3BEF7DD3B019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 13EE
Signing time: Mon 20 Oct 2025 21:00:09 +0000
Manifest this update: Mon 20 Oct 2025 21:00:09 +0000
Manifest next update: Tue 21 Oct 2025 21:00:09 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: cDn9ktq3lvuyw1Bc7+tv51hPM4ypc9c7lnXZnqCmyvk=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: pv2iRcEvGYzf08DLjeydaW_V3IQ.roa (hash: o0ame8S62inoRctHTPezl4cm8Q5eMbsn9LNmNr1Kn64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:6c:20:ab:a2:95:13:ef:48:4c:3b:ef:7d:d3:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Oct 20 21:00:09 2025 GMT
Not After : Oct 21 21:00:09 2025 GMT
Subject: CN=9b4deb4e18918c7912ff5c012b838e25b528f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:99:b4:c5:bd:3f:2a:01:70:bb:76:73:db:
65:8c:c8:9f:75:55:1e:5e:68:66:f8:bc:00:a0:d5:
6d:04:c0:96:72:61:ee:01:24:ac:0e:7a:04:35:64:
ef:ba:d9:5b:44:98:2f:76:dd:08:93:60:f2:1c:51:
13:b8:0f:23:0a:e1:79:d3:87:8c:5a:f7:d8:80:4c:
d3:6a:89:98:d6:1e:28:74:c3:3a:fe:49:d0:6e:56:
8e:68:02:75:50:96:75:72:d1:59:e3:b8:20:88:37:
5d:d8:b2:cb:cb:6a:35:04:6a:bd:cd:cc:c2:f8:50:
29:a4:6c:ed:cd:69:43:f4:ca:02:04:2e:48:9b:82:
75:dc:55:72:63:fa:5d:35:26:b1:31:ff:13:70:8b:
8b:93:f1:da:5c:62:e6:12:22:28:f8:aa:c5:25:52:
71:cf:9e:ae:d1:6b:2d:94:9b:3c:c1:29:a0:6e:88:
d0:77:1d:93:69:aa:2a:ae:f1:03:1d:72:2f:3b:c7:
5f:d1:2a:11:2d:65:18:0f:44:1d:0c:96:a5:47:0a:
92:ac:d8:4e:93:b6:4e:c2:f9:cf:15:1e:c9:45:5a:
d1:b0:a5:00:80:66:53:cc:c6:b7:05:15:e1:cb:7a:
16:04:82:ec:69:64:62:fc:10:67:0e:09:37:f2:4d:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:EB:4E:18:91:8C:79:12:FF:5C:01:2B:83:8E:25:B5:28:F7:1B
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:4a:42:00:aa:a4:4b:cc:6e:ac:77:57:6d:90:22:56:1d:
bc:b4:6c:b5:a0:1d:88:91:ac:02:ca:aa:2e:13:75:e8:d1:a2:
6a:92:d6:60:fd:49:2c:fb:9b:ac:e8:d7:2d:e9:5b:ee:6e:10:
69:2a:5a:36:84:d6:0b:6c:90:cd:77:04:6d:56:04:e5:81:a1:
ba:89:1d:9d:62:1e:ad:2e:2b:aa:e5:35:d0:ba:fa:96:5c:8e:
24:51:a8:8f:7a:cf:cb:c8:de:3c:f8:0c:bb:79:8a:b8:2f:60:
16:31:4c:58:1a:28:7c:57:2f:f9:9f:cf:1c:03:83:1b:f9:3f:
fb:d6:7c:26:ed:e4:08:11:81:cb:02:45:91:bc:f2:bf:a3:a0:
47:e7:5b:b9:9f:e5:3e:cd:20:f2:2b:c6:6d:ca:5a:38:9a:ec:
18:59:46:de:7f:a4:fb:fc:53:be:2c:88:72:4a:e9:3e:8e:6e:
b0:6e:53:2f:4a:67:67:a0:4f:71:fc:2b:3e:fe:03:b1:60:5e:
5e:33:fe:1f:8c:45:5d:31:55:58:2f:14:ef:a8:0c:93:dd:18:
b6:96:67:11:49:c2:a4:33:86:56:ae:23:be:35:a0:3f:fe:5b:
1b:74:ea:a7:42:bf:47:e4:4f:9e:42:f0:37:8b:be:e7:95:a2:
d5:c8:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:11:20 2025 by rpki-client