Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: DNhR2lirokN0b3jizYXeZIZG3YE7XCOXx0/RVHqSsR8=
Subject key identifier: B0:00:93:D3:AC:46:1A:9C:01:4C:78:8B:25:C6:B2:8A:C3:4C:4C:4D
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0199FCC6CBED3538AA43A94DC67EA205A653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 033C
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: z/vvOpVJfETCTaElvoY1IuV0cy3wn3PZ9wRAytLb8KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cb:ed:35:38:aa:43:a9:4d:c6:7e:a2:05:a6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=b00093d3ac461a9c014c788b25c6b28ac34c4c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:ea:a2:fc:70:49:26:65:af:c3:66:0b:8d:
3f:1d:4d:ca:56:47:76:43:9c:eb:8d:38:db:23:62:
03:7d:fe:f0:6d:ae:15:39:91:f3:e5:bb:b2:e7:a3:
aa:f7:2e:c3:c1:5a:b5:73:73:a3:6b:c6:50:74:5f:
05:be:f3:ba:2d:c7:18:d3:18:ba:55:14:0c:ac:cd:
e9:c7:62:96:8b:03:bb:ab:b8:13:6a:88:a4:7b:0c:
81:35:72:6d:1a:0e:ed:12:37:6c:a0:9e:b2:34:22:
e4:35:7e:7a:98:b6:ab:f7:40:4c:80:8d:51:d5:86:
62:8a:96:f0:a8:5f:11:4d:c2:78:ac:e6:7a:7f:7f:
de:02:92:a5:23:94:9f:20:ec:5f:c2:6a:53:88:af:
c4:1d:40:73:ab:ca:8b:c8:31:56:10:5c:bf:45:d5:
f1:05:20:6b:19:05:01:3a:ac:03:4c:56:f0:ed:2d:
40:2b:58:d9:1e:69:64:98:74:97:de:b6:3d:df:d0:
68:67:6d:ae:9e:dd:f1:a6:2d:51:c0:94:ab:85:ef:
57:6a:e3:2b:2b:fe:3f:ce:30:25:1f:f2:9a:e3:17:
e2:39:08:72:11:42:91:77:26:35:b3:d5:76:42:25:
3a:fb:37:ea:7a:98:26:97:db:59:54:82:36:f9:d9:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:93:D3:AC:46:1A:9C:01:4C:78:8B:25:C6:B2:8A:C3:4C:4C:4D
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:f0:2c:49:3c:b7:03:37:8b:5f:11:bc:f4:dd:65:24:df:
d9:dc:b5:c8:bb:68:78:ec:70:3f:fe:39:b7:03:5e:1a:6e:33:
9d:82:41:14:7f:2f:90:7b:0b:b7:e1:f8:74:42:93:28:b4:ea:
96:c7:02:33:da:2e:ed:2b:04:1e:86:c6:0d:5f:73:50:50:46:
fd:e1:75:d8:44:46:2d:85:dc:0b:32:2e:2e:0b:83:07:68:b8:
fe:d1:59:c2:0d:dc:20:0d:cd:b8:8d:d4:e2:77:00:ff:a6:d5:
e1:b4:7b:43:ed:c6:be:ca:06:c7:8a:3b:f8:fe:11:d5:51:bd:
09:c0:32:45:19:31:46:e7:7a:3b:f7:99:2b:8d:f0:51:ed:86:
5b:1d:8a:b6:cb:94:7b:1e:24:01:8c:82:ae:13:39:b2:16:01:
98:20:2c:f4:48:72:48:5b:62:b1:eb:55:e7:a8:96:bf:ec:f4:
db:8e:ce:7e:a9:cb:42:07:c1:cb:90:07:ba:ef:62:c9:b2:ba:
da:87:18:a2:72:a2:9c:c9:2f:3b:6f:7f:0f:3c:e3:23:28:df:
81:c0:19:f0:36:7f:58:bf:25:12:4e:eb:0b:38:18:d7:bb:e0:
38:5a:23:58:35:3f:2d:a3:ea:3c:a1:85:13:18:19:66:89:f9:
da:11:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:33 2025 by rpki-client