Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: j62oRhOlaoh4Ykebxf2SyBWErSJzVZHnPfnVQaB6syI=
Subject key identifier: 82:13:E7:42:71:73:AA:26:0C:9D:3D:DD:49:83:B0:46:FD:73:B5:BB
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019A526377A981D7EBD685A0B29064F4B827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 147C
Signing time: Wed 05 Nov 2025 05:00:41 +0000
Manifest this update: Wed 05 Nov 2025 05:00:41 +0000
Manifest next update: Thu 06 Nov 2025 05:00:41 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: XTd5W4bsEQqTEKaABCbhE6jxIsC7ZvC8wtwvfMxzChk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:77:a9:81:d7:eb:d6:85:a0:b2:90:64:f4:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Nov 5 05:00:41 2025 GMT
Not After : Nov 6 05:00:41 2025 GMT
Subject: CN=8213e7427173aa260c9d3ddd4983b046fd73b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:a2:13:b8:73:84:12:2f:e3:02:a0:a3:8c:
77:d4:76:1c:1c:fc:42:4f:78:ca:9d:63:2d:a7:d2:
90:26:28:d4:5a:dd:0d:66:87:ba:d4:7c:40:f3:9a:
c6:3d:c0:65:a7:22:09:f1:7b:68:ea:b8:10:5e:53:
35:00:c5:da:7b:42:50:04:94:7f:8c:f1:17:a1:1e:
a2:b8:83:2f:5c:72:49:98:d9:5d:d4:61:80:73:0b:
24:2b:fe:0a:c0:7b:ae:22:a4:8b:19:21:f4:fc:cc:
9d:22:06:51:74:fc:6f:f0:f3:72:3a:2b:60:00:d6:
8b:7e:16:52:ee:74:97:ba:3b:32:27:c6:e7:08:ee:
85:1c:66:ad:44:3e:bd:27:76:71:47:a4:70:f9:fd:
84:63:79:a5:f2:c5:29:e6:1c:c1:61:a0:19:77:45:
93:e2:ca:42:04:36:d2:fb:fc:4c:e8:d3:ce:25:3e:
a1:38:66:20:77:40:18:a0:5a:ac:37:83:48:39:b6:
68:48:3e:31:a3:56:52:fa:d0:07:e9:7d:18:61:49:
1b:7f:6d:ac:7d:03:29:29:a9:db:c2:04:39:ba:34:
9f:c7:72:9b:89:46:bb:b1:95:42:33:b3:03:fa:b1:
26:f5:5a:46:3a:c9:77:a4:f7:b6:19:45:5e:5a:94:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:E7:42:71:73:AA:26:0C:9D:3D:DD:49:83:B0:46:FD:73:B5:BB
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:f1:71:b8:6b:0a:64:37:fc:a7:5f:bf:4e:8f:ce:41:5f:
5d:0f:67:0b:ab:72:9a:1c:64:74:bb:dc:07:3c:96:17:b8:fa:
2f:6b:ae:a0:56:3e:72:d4:14:58:7c:6d:b7:6a:85:bf:3d:42:
6b:44:89:f1:64:19:04:0e:4e:3f:f8:39:e2:94:6f:bc:eb:99:
9b:7c:e0:cf:81:e0:f2:10:71:19:e4:9c:ec:f2:08:01:bd:1b:
cf:82:0f:58:bf:64:c2:4b:a1:84:6e:99:99:30:b2:ab:24:c0:
1d:e1:fa:ff:c6:fe:5e:5a:79:40:ef:a7:ee:60:4c:ce:42:04:
fe:90:73:3c:57:28:f6:16:ed:6e:18:87:91:77:70:c2:ad:c9:
13:bc:48:96:d0:ff:06:f9:4a:db:41:81:6f:eb:75:7a:6e:6f:
13:ca:b3:81:5f:bc:b7:78:33:37:ba:c5:b6:f1:d5:11:8e:f3:
bd:d0:31:d2:46:65:4a:98:3b:09:26:9d:8b:31:6d:ff:d7:5d:
b5:29:a8:b8:0e:67:ce:3e:8c:50:fd:6c:82:f5:38:eb:0e:91:
e8:b9:03:af:b8:b9:b4:cc:7b:21:ac:77:f6:36:fa:67:d6:33:
88:bb:da:12:12:b6:0b:8d:63:34:03:01:eb:b7:2a:28:9c:8c:
e5:d3:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:47:05 2025 by rpki-client