Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
File: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft (raw, json)
Hash identifier: QUQX8JY4ESpesEPRzvGGS7QnaVXFVUWD0T5S3snWPsI=
Subject key identifier: 4B:C2:29:19:0C:0E:23:8E:95:F6:2E:92:D5:58:B6:01:7B:21:8E:BE
Authority key identifier: D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
Certificate issuer: /CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Certificate serial: 0199FB7CB881EB3A1C08ED3BBEF0D62E2226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl (hash: j64ksINtBJhWjbgb7Ad2M3Wt7F55pCVDC5MNK8ulRzs=)
2: K0MDRhPja4FBoWQBNDrKCNqcl-Q.roa (hash: WPTwJ7uNCLk7bUU9KEWKxx4fN9uRask9g0nASALMjjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:81:eb:3a:1c:08:ed:3b:be:f0:d6:2e:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09363cfebbbf92a51e428533d3e8ad412aa3374
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=4bc229190c0e238e95f62e92d558b6017b218ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:98:3b:cb:36:9d:a2:8a:50:db:3e:e0:e7:
ed:35:d0:24:20:0d:3b:da:cf:78:12:b8:9f:23:24:
fe:82:48:fa:28:73:e2:12:fe:f1:e5:43:1a:1e:ab:
dd:4a:8b:aa:6c:ef:68:69:2c:9e:e8:15:6d:78:19:
1d:d8:44:0d:ce:4b:1d:8d:7d:f8:55:e8:c7:13:07:
7a:12:4c:e0:ca:e1:f3:83:d2:cb:02:f6:fe:d9:f2:
95:d4:96:cb:2e:cf:a9:f6:a0:59:ba:26:7c:d8:73:
ba:af:d9:2a:99:1a:68:c4:88:83:ee:ca:bf:ea:7c:
21:49:77:80:ab:d0:1c:bc:ec:bf:0b:a1:e9:6e:f8:
57:2c:fb:f0:47:51:8d:f0:d9:fb:ee:9e:af:57:15:
bb:16:85:dc:85:c9:7d:ee:0a:65:62:90:05:87:f5:
f2:cd:27:b4:d8:56:54:b4:27:b1:8d:2f:e3:f2:51:
9d:08:70:b8:00:ca:c5:09:e4:23:c4:7c:f1:93:94:
1c:b7:e2:3e:c0:fc:37:42:89:67:9a:19:8a:22:c1:
9d:e1:03:f7:5d:bf:af:ed:b0:c8:5f:fe:a1:72:89:
87:05:d7:9d:b8:7e:2c:45:dd:7a:49:85:f9:b8:36:
2b:7f:f2:ae:24:48:b8:eb:db:bd:1f:0f:c0:02:ce:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:29:19:0C:0E:23:8E:95:F6:2E:92:D5:58:B6:01:7B:21:8E:BE
X509v3 Authority Key Identifier:
keyid:D0:93:63:CF:EB:BB:F9:2A:51:E4:28:53:3D:3E:8A:D4:12:AA:33:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08164a-8821-47c1-bd48-5f9e482f1bf4/1/0JNjz-u7-SpR5ChTPT6K1BKqM3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:21:58:a3:e4:ec:dd:fe:e3:36:1d:87:21:c6:37:2c:e6:
53:7e:d7:60:c4:49:42:88:f5:ff:22:61:5e:fa:88:32:3b:16:
ac:f3:c7:6c:f8:6d:df:b7:20:4c:3e:14:5f:72:a2:a2:b5:74:
8e:5d:80:ac:c6:9e:f0:3b:89:01:ef:65:8a:4a:47:da:b9:49:
4e:42:3d:86:3a:e1:f6:0f:34:37:b7:96:82:2b:f7:98:b5:43:
33:9f:9e:aa:fa:d0:ba:5c:e4:2f:fa:1c:70:cb:0a:ae:70:d4:
90:ac:63:19:d4:dd:4e:c3:9b:bf:f1:ec:05:85:fa:e6:c6:ee:
be:34:f7:04:ab:e1:98:20:42:54:fe:b8:5b:1c:93:fa:ec:ff:
15:70:8d:d1:27:68:20:93:96:4a:c8:78:f6:df:2d:f6:de:c1:
fa:5c:87:fa:cd:e4:39:86:5f:0b:54:b1:e5:50:27:34:18:cf:
1c:ef:10:d9:d2:ce:55:d8:89:0d:84:d0:5f:fa:55:ff:39:69:
c7:6b:10:63:97:22:db:80:0b:c9:61:66:31:bd:b4:ae:02:0a:
f9:19:09:0f:22:96:74:d5:f8:e0:d0:fb:3d:d7:cd:04:f8:c1:
8b:17:57:2d:eb:82:33:86:78:fa:29:94:f3:1b:f0:7c:ae:bb:
88:0d:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:42 2025 by rpki-client