Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 7Xx2dsgBJ9mZFXrUUlmtwtyHkvu8GVEeBBrXTkvAQiE=
Subject key identifier: EE:A7:BE:4B:6D:CF:95:4C:29:8F:8F:14:1D:3B:E0:67:D9:BF:32:75
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019A4FCFE868D8C49CE25DC7D29BE7B52BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:16 +0000
Manifest this update: Tue 04 Nov 2025 17:00:16 +0000
Manifest next update: Wed 05 Nov 2025 17:00:16 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: +hYIo+fZVvXK8yk2q9de5UB9g8PddQ3RsjGQnFsYVfw=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e8:68:d8:c4:9c:e2:5d:c7:d2:9b:e7:b5:2b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Nov 4 17:00:16 2025 GMT
Not After : Nov 5 17:00:16 2025 GMT
Subject: CN=eea7be4b6dcf954c298f8f141d3be067d9bf3275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:ce:17:39:19:c7:9d:50:ef:ab:15:39:19:
1d:9d:a6:24:af:01:55:66:13:f8:45:0b:8e:25:40:
10:a1:37:ff:3e:5e:53:fd:d4:62:32:f2:0d:dd:2d:
96:64:3f:d5:6e:f5:c8:6d:9e:59:79:c5:30:31:ff:
f9:b8:19:af:c5:98:0c:6b:fd:6a:06:e5:6e:0c:50:
95:62:70:49:41:03:65:be:0a:98:99:d9:fa:bc:ba:
24:a4:eb:a1:65:8d:2c:eb:5c:79:05:0e:73:5c:9a:
00:66:f8:bb:67:ad:06:fb:8a:67:2c:63:53:88:9b:
da:01:44:5f:c8:af:9b:e9:24:75:e7:c3:19:2b:fb:
49:cd:a5:2e:28:47:6a:7b:ef:da:76:3d:27:e9:72:
ef:6a:5d:c8:5a:43:4e:ad:31:be:ee:ca:d8:2d:04:
ff:bb:d5:e1:2b:fc:9a:d2:85:b7:a5:d1:76:15:c6:
d2:cc:ec:db:a6:e5:9a:09:50:35:d5:f2:3d:51:d4:
dd:d2:96:07:91:3a:60:cb:0a:81:96:46:ec:59:ee:
7d:74:b2:bd:31:95:3f:23:a6:1e:33:44:a3:2f:73:
69:32:6f:64:c9:43:d2:4c:6a:90:de:0b:25:03:89:
cc:04:8a:ae:ac:47:4d:61:87:0e:66:9e:35:37:8a:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:BE:4B:6D:CF:95:4C:29:8F:8F:14:1D:3B:E0:67:D9:BF:32:75
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:ab:d5:73:66:56:01:b3:0c:a1:6d:c3:a8:dc:a5:d5:dc:
14:43:9a:44:d9:45:13:c2:0f:76:00:8a:85:11:be:fe:63:2c:
a6:8d:c7:65:ac:29:25:b7:37:fb:e3:ad:b8:15:1e:d6:d7:64:
59:ad:f8:af:c7:b8:58:e3:32:07:7f:11:6a:c6:98:3e:a0:ed:
6b:03:84:01:f1:f0:85:94:98:55:46:bf:2b:14:5f:42:9b:b0:
f1:91:4f:f2:7c:36:1a:c3:b5:e5:3c:f4:ef:d1:c3:9d:7c:27:
e1:61:b0:e8:f6:b6:09:99:c0:66:bf:c3:07:1e:ee:d6:7f:55:
4b:c0:6b:cc:93:18:9b:ba:86:85:74:e7:ce:cc:08:45:6e:f1:
52:9f:cb:e8:b5:42:d3:cf:84:2b:02:e5:d1:e7:a1:93:d8:3f:
d5:1b:24:bf:b5:15:b3:c8:b0:28:ae:40:eb:b2:40:f7:68:e7:
9f:ea:59:40:32:65:cf:bf:8a:80:fc:8c:ab:b2:3d:36:23:0d:
3c:a2:e1:f7:b9:ac:78:ee:65:a9:a0:38:4e:c4:97:64:d1:53:
45:40:ec:40:8e:00:e1:6d:a1:f1:9c:08:e7:47:1a:d9:55:f0:
e1:ca:c6:f6:ba:53:fc:d4:bf:cc:bf:24:d7:ae:32:bc:ae:08:
b8:e1:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:26:59 2025 by rpki-client