Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: ZJ9FVL4wnCtnNhHS+80bafQJU7qjeAfE5/5QglZwrmg=
Subject key identifier: B9:6D:47:9D:CF:1C:62:03:43:A9:19:A4:F1:4B:0D:28:4D:DB:CF:FA
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 0199FC582BE0D5C2EA54111A6503C7E0EB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1465
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: 1wS3XtO7+enTobz7FbzT11d0hp1vTwS6YXQ2OEx9C38=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2b:e0:d5:c2:ea:54:11:1a:65:03:c7:e0:eb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=b96d479dcf1c620343a919a4f14b0d284ddbcffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:32:3a:2e:63:c6:e2:a5:b1:5e:61:5d:e1:
48:29:8b:8d:f0:6d:67:c4:79:65:3b:82:f1:6a:af:
74:7c:21:57:80:e0:e3:e9:5d:07:4b:b6:14:fc:3c:
2e:f1:30:35:f2:f9:52:b0:a0:c4:d9:bf:24:78:17:
a0:2c:db:f6:02:a5:77:e3:a6:80:f4:b7:91:2b:13:
b6:ca:de:cc:d4:a1:ec:8a:c5:c1:a6:0e:b6:ac:8c:
45:6e:28:2b:f1:1e:3b:13:f1:5b:6f:69:c4:46:3b:
6b:2e:99:42:b7:1e:d5:d0:7a:f5:4f:46:2d:e8:88:
02:74:47:54:39:7a:b6:e4:13:7d:14:af:75:79:31:
75:07:1f:56:55:68:cf:7f:55:94:09:6e:c2:45:e1:
c4:3a:2d:b2:bb:e3:ba:0a:9f:d8:4d:24:b0:20:ab:
df:b8:72:58:7d:0d:f2:79:63:a1:d3:44:3a:1b:d6:
ea:72:05:30:30:15:5b:1f:4f:9f:a3:e8:47:e5:bf:
f9:8d:ef:7d:d5:7d:58:6c:b5:99:32:48:34:e9:6a:
e4:2d:34:c1:81:5e:23:94:06:42:7b:f4:5d:93:63:
81:c8:ad:7c:ea:de:d0:7e:83:00:c2:2e:f1:aa:2a:
f6:5e:09:5b:d1:8e:de:b1:da:4b:f4:24:6c:8b:9a:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6D:47:9D:CF:1C:62:03:43:A9:19:A4:F1:4B:0D:28:4D:DB:CF:FA
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:9b:fe:13:32:d0:eb:42:d4:39:00:66:bb:64:14:93:24:
57:87:de:34:2c:d6:35:cd:53:5b:77:cc:2d:e6:71:95:ec:88:
bc:ff:d4:2b:c8:3a:37:0e:79:46:85:c4:f6:1f:f6:f8:39:f7:
4e:97:d4:5a:ef:5e:37:4b:33:98:ad:fc:68:df:79:0f:7d:78:
6c:e0:88:9e:93:e8:f4:a5:d2:bd:50:7b:04:5c:ec:e2:05:ca:
b1:f5:52:f7:58:0a:59:e7:2a:be:d2:4b:a0:20:0b:2e:f1:c1:
8d:9b:62:69:44:45:c6:3b:92:ad:12:ac:45:d8:69:12:51:c2:
0d:24:4c:95:73:65:2c:a6:a7:ea:01:81:28:71:68:17:a8:03:
54:41:ba:5c:95:90:65:5a:20:2a:fc:a0:b7:3c:c1:72:44:8a:
39:bf:18:c9:10:11:25:86:53:30:d4:23:db:f4:17:d7:ad:73:
8e:db:d7:aa:da:e9:4e:85:e1:46:7c:5f:1e:0e:6e:4e:86:af:
67:f7:0c:d4:e1:3e:55:62:33:37:41:85:b2:71:89:aa:97:53:
67:28:52:e0:84:94:8c:18:56:a8:13:80:b6:e8:d1:cc:f0:6b:
61:c6:52:87:14:55:02:8a:4e:54:95:e6:6e:63:90:04:a9:40:
aa:7a:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:19 2025 by rpki-client