Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: vI8RvFLpeGKLzc9sdwDm93+qy79Okz0YSz50zupzcWY=
Subject key identifier: 72:03:53:77:AE:2A:14:6E:6A:C9:A0:E1:84:FF:9C:9C:81:B2:98:FD
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019A5307D051992945F6876CAF2467744545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1691
Signing time: Wed 05 Nov 2025 08:00:12 +0000
Manifest this update: Wed 05 Nov 2025 08:00:12 +0000
Manifest next update: Thu 06 Nov 2025 08:00:12 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: /watcOF5MpMrx2jzOAfRbymfvfsNjnxHNAGxH8PlosY=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d0:51:99:29:45:f6:87:6c:af:24:67:74:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Nov 5 08:00:12 2025 GMT
Not After : Nov 6 08:00:12 2025 GMT
Subject: CN=72035377ae2a146e6ac9a0e184ff9c9c81b298fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:0f:99:a5:e1:34:cd:19:6b:ce:9e:3d:90:
47:fc:c2:15:c2:9f:ab:9f:ad:a2:cb:c2:b3:7e:5c:
dc:df:9b:53:5b:90:ac:81:d0:9d:04:9b:9f:5c:0f:
8f:a9:b5:12:8d:ed:65:6a:33:2c:5e:50:cc:88:56:
fa:19:13:57:e9:8d:12:b5:07:51:e4:c1:2e:52:ce:
c5:6f:90:ff:62:5b:2a:37:e2:93:25:81:ad:ef:c6:
64:93:12:f2:cd:cc:4d:6d:a4:8e:f0:1d:8b:21:4e:
4e:29:d4:aa:33:10:d4:cc:d5:42:9c:ed:76:c9:e1:
fd:28:d8:8e:eb:df:84:a4:cc:2d:ed:99:cd:67:9a:
ab:f9:d7:15:47:66:42:03:29:51:76:92:36:5d:de:
6a:8c:ac:79:99:cd:78:cb:3d:95:fa:7c:a8:a3:6e:
88:dc:67:a5:2d:22:eb:22:89:7d:db:dd:03:b1:ab:
70:95:7a:c3:df:b9:1d:aa:a6:5e:44:82:0d:0e:e8:
e4:fc:1d:64:be:a8:83:5a:e6:cb:92:c2:8a:d7:e9:
ae:1d:27:c1:98:15:a7:b6:0f:09:e5:52:42:eb:af:
30:4d:58:cd:78:48:3a:e1:4c:69:aa:ac:22:db:1f:
72:fe:7e:b9:b0:90:38:0b:1d:c9:5e:36:90:e6:f7:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:53:77:AE:2A:14:6E:6A:C9:A0:E1:84:FF:9C:9C:81:B2:98:FD
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3d:21:6a:65:b9:e7:f2:2a:f6:cd:b6:6d:40:b8:86:27:20:
58:88:89:04:96:f0:5c:a8:7c:ca:28:07:31:bf:16:70:e1:a4:
ec:5e:e6:a3:a7:42:78:44:8e:c5:10:b3:35:8b:96:bb:21:8d:
b8:4e:7c:22:cf:69:f2:d6:6b:a0:45:d0:b9:d1:03:2b:44:cf:
63:aa:5d:53:27:a8:b6:2a:63:ed:f9:a3:9a:06:d6:82:ba:68:
64:eb:5d:f4:48:4a:38:ab:86:64:69:60:bc:77:78:7f:1e:d4:
c9:e0:f6:39:76:d0:3d:f7:2b:57:91:36:b7:75:70:5d:a6:e8:
7f:15:a4:ac:be:b5:84:5b:ca:00:89:8a:07:a7:95:6a:72:d9:
95:30:6e:d5:33:95:64:5d:b3:ef:56:fd:97:98:52:7b:58:a7:
24:ed:c5:e8:3f:1c:a4:08:54:2f:ea:b7:c5:db:6b:5c:e6:93:
82:ef:50:a9:cd:06:cb:e8:78:7e:24:cb:bb:a7:e9:3b:c4:cd:
ad:16:d3:b7:bc:55:47:ec:f4:88:17:d8:31:90:d9:d0:8a:3c:
44:14:b8:22:02:13:88:87:e3:78:89:ac:c4:f9:a9:42:36:37:
e1:a8:44:93:4f:4d:20:63:74:36:40:79:ef:f7:ff:94:3d:66:
eb:0a:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:44 2025 by rpki-client