Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: +1NWLNxu9yWVsTXCqh6P9YpLIA0N41VYmpiLzCcS5BI=
Subject key identifier: B8:6B:03:EA:4F:8F:51:3D:15:98:49:D8:3A:A0:21:6F:FE:91:11:0D
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019A4DE1E66081C32DB6D3050FA4D1CED7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: 63eP6c8jvMvyrn3mBej2O44eIXFKz4+sWduWYZNyU/I=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e6:60:81:c3:2d:b6:d3:05:0f:a4:d1:ce:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=b86b03ea4f8f513d159849d83aa0216ffe91110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:d4:42:9a:32:82:71:4d:72:e1:e7:84:e5:
e9:c0:57:a2:22:43:5d:6a:46:64:5f:96:b0:f9:ac:
06:08:7d:19:aa:ed:f1:9a:aa:35:9e:18:45:e1:2f:
43:9b:fc:ab:86:bf:a3:7c:c9:94:00:79:77:f9:f3:
16:c1:34:b7:8b:c0:b9:4a:ac:48:51:96:c6:2f:fe:
f7:1a:46:07:2c:d1:6a:a5:a2:6c:86:f3:1a:0e:12:
c2:bf:38:1f:5b:14:fb:c1:a8:c1:96:83:ec:7d:27:
52:74:a1:9c:38:10:3b:6f:17:b7:0a:a2:42:c8:96:
5c:55:29:b7:ff:3b:c3:eb:67:dd:c5:76:24:d7:b5:
f2:5a:93:4c:8f:cb:b6:61:8b:aa:ea:ce:fe:4c:9a:
a9:85:fa:b5:24:22:ab:49:5b:e1:2e:95:50:ca:5e:
46:59:77:69:7c:b8:f3:12:d3:23:ed:90:a9:e7:36:
67:32:9e:69:58:15:84:c3:d5:a3:4c:04:e9:59:af:
1c:d5:2a:34:5f:14:27:99:d0:f0:1f:80:84:05:67:
79:7f:44:0c:7b:a1:8b:25:0c:61:ac:2a:f1:22:9d:
33:18:b5:8a:a0:4b:b1:8d:f9:fe:59:c7:21:73:37:
0c:95:a9:d7:07:ec:fc:42:a4:e2:28:79:aa:a5:00:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:03:EA:4F:8F:51:3D:15:98:49:D8:3A:A0:21:6F:FE:91:11:0D
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:c3:06:45:4e:37:c0:19:78:8b:d8:07:49:f0:ac:0c:af:
7a:a1:b6:20:10:9f:88:08:33:99:78:5d:3d:09:43:e3:39:78:
e8:90:3a:a0:c7:af:31:2d:6d:fe:07:92:0e:a6:0f:16:e4:63:
2d:22:fd:39:35:8a:e8:27:49:81:8b:75:22:70:37:ec:0a:33:
65:bb:be:ef:57:02:33:1c:81:55:bc:12:4c:7d:5d:a6:6c:93:
90:06:ee:4d:4e:5d:1f:5e:10:64:9f:80:58:35:4c:ae:cf:54:
21:77:b4:75:7e:89:ac:d1:63:c5:0b:88:7c:d9:67:12:2e:62:
cf:65:e1:d7:fb:65:da:be:3d:c2:04:1c:27:df:b2:20:7c:2f:
88:c7:18:57:79:8f:9a:23:d7:80:c2:22:a1:76:67:66:d0:49:
c9:8a:70:fa:5a:cf:3f:21:71:93:23:8b:df:3a:4b:a6:70:69:
59:6d:0d:38:e0:2e:e4:81:f5:d9:24:27:43:81:7e:74:97:5e:
aa:3b:2b:24:3d:e4:a5:45:25:64:ac:55:f5:49:3f:00:54:41:
8b:73:9b:62:f0:29:b8:e8:9b:da:41:a9:98:b4:f7:0c:6c:85:
b2:d8:9e:e0:eb:a1:6a:dd:36:db:78:96:09:0b:58:a5:41:95:
b7:92:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:08 2025 by rpki-client