Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: BU4ZM5YiVNs7neFdHywrqEix/j9Q/8e4wzkJ/HXBXwc=
Subject key identifier: A4:70:DD:B3:29:F0:1B:65:36:0E:46:E3:DB:B4:22:06:02:8C:B2:DC
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019A4EF5C5686A44AEBA88BC525DABA9300B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 09C9
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: v1puyE1l8ugVXqP1bRjSKD/evkUQY0M0A93sZuKwEaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c5:68:6a:44:ae:ba:88:bc:52:5d:ab:a9:30:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=a470ddb329f01b65360e46e3dbb42206028cb2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:73:31:d6:70:d5:15:be:b4:f5:56:9c:4a:
ab:83:8b:b1:67:ad:a9:d2:f6:e6:5f:87:64:ee:99:
39:56:17:b0:e9:81:58:6e:0e:aa:73:23:94:d5:a8:
c0:6b:ca:cc:5d:f7:07:e7:93:4d:7f:04:b0:59:18:
f2:a8:fe:b7:27:6b:3f:df:f9:02:66:ae:1b:c5:48:
93:8d:d4:86:d7:12:19:cc:fe:70:3a:30:ff:ca:1f:
e4:ec:8c:7f:c3:1b:de:6c:3d:0e:e1:32:5e:0c:2e:
97:6b:10:d2:2b:11:85:33:c7:73:ab:bf:fa:81:8a:
5d:9d:6c:81:2f:5d:bc:1f:2e:ea:ff:42:91:dd:94:
ce:41:26:fc:b9:09:89:dd:f1:aa:fa:44:e7:49:3c:
53:d8:5e:ee:01:bd:6e:fa:e8:c6:cf:91:42:a5:df:
a3:31:e3:ac:21:77:d6:ce:f8:0f:c4:03:38:e7:2d:
a2:36:31:89:58:0d:ba:1c:f0:cb:51:5b:09:74:ea:
fb:e9:49:7e:55:e6:b5:c1:df:1d:bc:4b:75:9c:c7:
8b:85:84:51:c3:ec:e7:c5:6d:82:f6:27:1b:93:1a:
62:70:f5:2d:8c:40:e2:4b:0b:02:d1:45:7e:c0:3f:
34:4a:f1:6a:cb:d6:32:19:8b:58:1c:1f:06:56:95:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:DD:B3:29:F0:1B:65:36:0E:46:E3:DB:B4:22:06:02:8C:B2:DC
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:19:9e:4e:a2:73:a6:04:a0:14:f0:2e:5e:1b:28:3b:4e:
25:2d:f6:28:ff:db:6d:0d:2f:34:0c:84:04:10:1e:f8:0f:da:
94:2c:8d:23:dc:5e:10:b2:72:45:98:f4:81:6b:aa:ac:1c:24:
79:01:ba:46:26:1e:d7:a3:cf:3b:09:ef:08:31:5f:f4:11:06:
8c:4d:e2:2d:6e:4e:fa:01:a3:ed:35:cb:90:d4:b8:63:b7:4f:
18:76:6d:4b:cd:6a:cc:68:64:50:61:4b:b7:9a:8d:cb:2d:07:
78:db:31:00:c6:a3:32:b3:a4:a3:c4:7c:65:77:74:a5:68:55:
47:0d:05:2b:cb:35:15:f3:36:2e:17:96:41:19:ce:bc:07:43:
95:27:9f:eb:a6:51:38:c5:dc:66:77:f3:fc:cf:a9:fc:92:b0:
31:57:15:e5:c9:8a:64:26:71:f8:d3:fb:59:09:95:04:33:67:
bf:56:28:08:06:9b:ad:c1:07:2f:c5:1e:6f:4b:05:af:6b:76:
f9:64:45:eb:df:ed:26:e5:32:07:87:e9:cb:d7:5c:37:3d:45:
8f:df:0f:9e:1d:76:b0:1c:16:ad:43:e0:57:45:c9:7f:c9:3a:
e9:ac:09:23:b5:ee:53:36:78:23:4e:c2:dd:f5:59:88:15:53:
90:4e:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:28:24 2025 by rpki-client