Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: +NwizSAJYdAp3/gjjb1x2ESCmLzplA/5fq7kYfnGvok=
Subject key identifier: 24:48:CE:4A:B2:6B:6D:C1:9A:45:68:0F:A2:13:56:4A:FF:80:3F:BB
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 0199FB7CF0FE46648849EDC4C48D36BC54F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 09AB
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: /N/+vq4slVaRRQLykfEZgJ5A7+taS4l7qwFuqRhQP+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f0:fe:46:64:88:49:ed:c4:c4:8d:36:bc:54:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=2448ce4ab26b6dc19a45680fa213564aff803fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:f1:3f:40:f7:60:8f:3b:3e:c0:f3:73:2f:
7a:5e:ec:be:10:b2:b0:0f:67:84:2b:ec:f2:d7:c6:
b7:b6:49:96:e4:2c:a2:f1:75:5a:0b:cf:8a:1a:cb:
59:55:1a:b3:f1:c2:6a:80:d8:8e:11:ad:70:52:ba:
35:18:0b:ed:60:20:12:79:86:0c:d4:10:d1:6e:80:
f5:1c:8b:ee:6f:33:7c:3c:78:c9:ab:1a:f4:cf:bc:
2f:ad:90:c3:17:c9:d7:2a:08:b7:d6:24:0d:64:bb:
46:68:44:19:af:b3:4d:93:06:a9:b8:93:1f:03:02:
df:25:7b:44:1c:41:1c:33:67:d1:41:3d:1e:e0:16:
d9:83:67:45:a1:65:a1:3a:90:d7:b6:72:15:bf:bf:
ae:0a:1b:8b:46:e2:6b:ea:36:56:8f:b2:31:c8:ab:
4d:ab:94:b8:4e:83:10:27:0c:fe:34:0f:ca:8b:0c:
5b:63:45:8d:ac:6a:a2:b1:d0:34:e9:2a:a0:08:e2:
39:ba:25:c0:0b:e9:ef:10:d7:8e:fe:64:1f:c7:42:
1e:bf:ce:83:80:0e:d7:35:a5:d1:cf:11:7b:f0:ba:
bb:45:57:3f:53:f6:4a:1c:06:d4:ae:ca:ae:d6:a2:
dd:15:3e:2b:c3:2c:89:dd:71:b7:5d:cf:f6:f7:12:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:CE:4A:B2:6B:6D:C1:9A:45:68:0F:A2:13:56:4A:FF:80:3F:BB
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:55:64:c7:98:87:18:c1:23:e1:9d:b6:67:de:93:38:5a:53:
9b:d3:27:7c:bf:53:40:f5:61:b4:09:4e:fd:ca:82:da:e9:1b:
e0:fc:de:69:a8:b4:f7:cb:43:6b:71:09:3f:7d:df:b9:87:ec:
66:a6:3d:6b:c9:87:67:c6:0d:9b:7c:0e:50:d5:8d:e9:2b:cb:
1f:85:96:b7:ae:d7:cb:98:ef:e8:89:b8:9b:02:a7:f8:ea:e3:
f3:c8:56:5d:cc:c4:21:97:ca:f8:e3:25:c1:dd:dd:50:ed:25:
cc:82:ed:86:29:fe:fa:20:c6:53:d0:a4:30:bc:a1:5c:5d:8a:
06:89:d4:bf:97:1b:1f:54:9b:03:5b:69:3f:d2:26:c7:30:de:
b6:ca:db:af:1d:0f:64:e3:e5:59:9d:d8:e1:92:19:7b:84:2a:
e8:6f:bf:8b:b4:d0:8c:93:41:0a:6c:4d:9d:ae:ff:d3:ad:ce:
bd:51:ae:97:23:37:df:d8:fd:7e:61:58:1d:74:9b:32:1d:ad:
0f:33:40:8f:9b:c9:26:79:78:f8:fd:f9:77:a7:41:5c:78:7b:
8f:62:c5:b0:b8:4c:b0:09:2f:45:27:5c:40:49:2a:4a:1c:d5:
bb:f7:8f:0b:d7:9f:47:59:8c:ca:6a:5c:bd:24:30:18:cf:48:
57:19:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:50 2025 by rpki-client