Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
File: jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft (raw, json)
Hash identifier: QCieRzFrKR3XT+wG7QDjrb1y8iGLHl/SgGm/CVHdCzo=
Subject key identifier: 3F:51:BC:D1:50:F7:C2:0A:45:06:6D:19:02:9B:61:72:7B:5B:A6:38
Authority key identifier: 8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
Certificate issuer: /CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Certificate serial: 0199FB7CD9BEBE4CC782B1FA3697D5EB918D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
Manifest number: 0630
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: 960ydd6N5IVjJ8SKw0-cCFu0l5A.roa (hash: vdzIyqJL7Fj4rd7R5SOUV3BY5/WQ96AWM5L49KfXiUE=)
2: jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl (hash: YMM8/P2OyRkFiMSZE0Mr2hMdbKQ566+NUgz2xuztRf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:be:be:4c:c7:82:b1:fa:36:97:d5:eb:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0f683867ef769a0a22ade17118ed06fa57b81f
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=3f51bcd150f7c20a45066d19029b61727b5ba638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:b6:a7:93:cd:45:80:78:59:cf:1e:3e:33:
61:06:21:5f:26:0e:57:3f:77:43:f3:bf:52:3b:d2:
75:b2:5c:92:eb:7c:29:69:86:e0:eb:d2:84:cb:4b:
ed:e7:08:f7:4b:36:95:51:a8:89:9e:d7:fd:98:35:
e9:a5:e4:28:8c:a8:58:41:82:95:72:11:a5:2e:86:
86:9c:4b:37:96:d0:1b:3f:54:44:48:be:ea:df:35:
8a:c6:14:e1:c2:8a:4c:e8:cb:cf:ad:48:e1:3f:42:
af:e5:38:91:c3:8f:84:08:1b:ed:fc:6d:10:ad:73:
e6:44:2d:51:64:f0:0e:a9:9d:04:07:94:4a:49:34:
ad:f3:c3:7f:90:e4:30:42:4d:07:e3:57:2b:32:72:
e5:5c:97:ee:6a:d1:5f:3c:3e:0a:7f:45:7c:9c:84:
ea:e8:34:74:a8:f3:20:c9:7d:58:f0:b2:de:59:04:
ac:07:08:e8:f1:67:50:5b:58:a8:c5:ee:34:fb:5d:
01:94:12:c9:a5:55:2e:65:99:f1:61:c8:62:fb:c7:
6a:62:fc:cf:b8:b7:7c:2b:53:5c:3a:d5:4b:63:86:
cc:0d:0a:29:60:57:b5:07:c4:60:1a:70:bb:2a:a0:
77:4b:d9:ab:42:05:36:4c:3a:94:73:d5:d4:14:7a:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:BC:D1:50:F7:C2:0A:45:06:6D:19:02:9B:61:72:7B:5B:A6:38
X509v3 Authority Key Identifier:
keyid:8E:0F:68:38:67:EF:76:9A:0A:22:AD:E1:71:18:ED:06:FA:57:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jg9oOGfvdpoKIq3hcRjtBvpXuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/86c002-758b-495a-b9cd-7b0dc00a8c20/1/jg9oOGfvdpoKIq3hcRjtBvpXuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:5d:c5:53:54:1f:2e:9d:b0:4d:f7:26:9d:6c:51:89:95:
25:91:f9:79:e2:1c:d3:bd:21:5a:f1:a8:fc:3d:1c:b1:26:57:
b3:66:6f:43:f3:be:91:ff:81:e8:6a:41:4f:88:60:26:61:58:
01:c4:25:d0:4b:08:ce:28:34:a9:c3:c4:c9:55:a4:e0:c6:56:
5b:cd:e0:8a:62:34:41:49:88:65:65:1e:c3:f2:d0:94:15:1f:
0f:23:b5:0f:5f:c0:2f:2e:1b:0d:c2:59:ed:1e:58:9d:8f:af:
e4:b3:97:e1:ff:f1:06:22:60:15:94:d2:4b:19:29:55:7d:8c:
6a:f6:82:ec:83:ec:f8:92:0c:63:e2:be:97:68:b5:68:cb:d5:
13:6c:6a:e4:cf:87:94:49:af:be:19:d8:c6:0e:3e:ea:d0:c5:
3f:cb:94:1a:09:8a:13:83:69:d8:22:8a:47:0b:a3:24:4c:b1:
65:07:af:eb:71:48:8f:5b:fc:09:d8:18:f1:0f:00:a3:65:33:
c8:83:2f:5c:db:4f:bd:62:46:d6:4a:e8:23:40:2c:6c:5f:4c:
67:fa:88:1f:a8:53:49:8c:66:25:f0:00:c1:bd:fd:19:1e:45:
5b:10:47:a1:2b:2f:15:5c:9d:ff:58:9d:ff:5b:11:ae:45:69:
84:a0:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:00 2025 by rpki-client