Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: Rt8uIMFyjZ8lHp+J2xaEl2rgkphTR+Z7vodKSxW4m1Q=
Subject key identifier: 58:A9:A3:57:1A:B8:8B:7E:7D:55:DD:A7:86:B4:23:BD:EE:E1:80:1D
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019A5074C34272ED20A6289E82C3AEB32F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 147B
Signing time: Tue 04 Nov 2025 20:00:20 +0000
Manifest this update: Tue 04 Nov 2025 20:00:20 +0000
Manifest next update: Wed 05 Nov 2025 20:00:20 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: hp2U33yBTDNsdH6T1kbKnaWCVejbtoDysSQ3tdCu//M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c3:42:72:ed:20:a6:28:9e:82:c3:ae:b3:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Nov 4 20:00:20 2025 GMT
Not After : Nov 5 20:00:20 2025 GMT
Subject: CN=58a9a3571ab88b7e7d55dda786b423bdeee1801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:e2:44:31:3c:3b:63:3c:2a:e9:8a:ea:8a:
16:e3:77:91:ed:7b:ba:bf:d6:6e:31:d1:7d:f4:2e:
94:6a:06:18:ce:c3:c4:b5:d1:ae:5e:35:15:cc:c5:
06:ba:90:b8:aa:4a:3d:eb:d4:a2:24:89:d3:da:a5:
b2:4d:50:bf:5f:f1:da:ea:35:c8:cc:69:dd:0e:38:
b3:66:50:15:ea:63:eb:e7:86:64:2d:2c:ca:e9:7e:
e7:45:20:fd:74:c9:47:c0:2b:2e:48:7f:4d:9a:a0:
e2:ce:98:ca:b9:c3:09:86:2a:88:34:e9:28:3f:29:
1b:c0:01:67:bf:82:98:43:f4:36:86:c5:f9:1e:f5:
46:8f:41:d2:24:d1:14:af:a0:2a:e9:c8:8c:a8:73:
ab:ac:a4:df:56:ee:6b:4a:4a:db:54:28:1b:b8:74:
9d:76:21:4e:24:06:e5:7a:23:0d:e0:e8:96:7d:30:
4f:2e:2d:ed:b3:e1:da:73:e9:67:64:08:37:be:5a:
c9:67:ff:c5:8c:20:c8:8e:3f:98:8f:5b:a0:c9:01:
00:64:84:aa:00:81:2b:da:28:53:86:78:b2:fa:5e:
d7:16:65:ea:3f:32:ed:81:29:c7:df:7d:8f:12:34:
2a:86:fe:d5:96:08:c6:09:9f:5a:ff:b7:5e:fa:13:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:A3:57:1A:B8:8B:7E:7D:55:DD:A7:86:B4:23:BD:EE:E1:80:1D
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:2b:0b:31:a8:51:0d:ee:fa:23:d7:6e:9d:69:68:92:e8:
79:fb:26:b7:84:7a:74:5f:c9:94:45:4c:6e:96:55:9b:23:78:
08:e3:98:5b:f6:2e:08:d1:01:e2:dd:bd:40:6e:71:bf:4b:98:
4a:3f:f9:09:d2:cf:fa:a8:d3:5c:fc:52:20:42:c6:ae:ec:63:
ca:85:cb:5b:a7:57:de:86:5e:ad:f8:b4:20:e2:77:cb:2f:30:
37:4b:0e:a9:5b:b8:a0:77:64:9c:74:26:7a:3d:7d:4d:7e:9d:
27:9c:bd:d4:f1:b1:ec:ba:7d:58:58:f2:23:5a:07:51:b3:54:
a5:81:5e:5b:6a:4a:43:7f:17:b4:2e:e7:ea:aa:45:55:10:ae:
e8:5a:60:9c:b3:cb:f5:e9:d8:c1:03:57:66:1d:86:e5:f8:d6:
64:9f:f0:38:9f:d3:a7:38:c4:6d:1f:ce:e9:6e:42:62:6a:5b:
e6:d3:c3:68:fe:bc:68:b3:6c:eb:5f:25:6c:0f:fe:b6:e0:81:
e5:f9:11:54:a6:e2:f2:5a:06:22:1b:ce:50:d6:65:48:e1:0d:
bb:5a:92:04:89:56:e3:94:6f:d9:d3:5a:61:91:62:0b:70:61:
ad:b3:3a:ba:59:73:e2:8a:04:8c:3b:43:b7:f8:05:9b:d6:01:
5f:82:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:19 2025 by rpki-client