Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: cANFCVXeE9YDIfp7SktpNy5mAzVlETbqyaaII1KrVuM=
Subject key identifier: DC:34:22:07:37:6C:37:7F:E8:B1:CB:A0:BF:36:77:3F:E1:F9:CB:3D
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019A4F9904E1B4FFDF92826411C66BB109C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: URXSP2yrLJgN57fZLrPsp3IbyQ8ddpfQVcm7t7K77KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:04:e1:b4:ff:df:92:82:64:11:c6:6b:b1:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=dc342207376c377fe8b1cba0bf36773fe1f9cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9e:48:bf:dc:cb:7a:33:74:41:b6:79:9b:26:
09:95:f1:19:16:d9:bf:00:cd:95:35:d5:9f:84:bd:
00:05:eb:b0:6f:d9:09:b3:13:9f:9d:82:05:58:5d:
4b:14:66:07:7d:40:81:20:d1:b4:82:32:e4:cb:cb:
80:13:2a:a1:71:7a:29:f7:68:84:8a:a4:94:a6:b7:
09:1c:8d:00:c0:83:2d:f0:6b:e2:23:75:ca:ce:ec:
19:ab:04:b7:5b:ae:06:58:30:25:30:8a:ec:bf:62:
a6:45:a3:1e:9f:59:6f:af:f0:0c:af:b9:62:c5:e0:
8d:12:f7:07:fd:36:a2:14:ef:58:73:ed:50:ec:48:
aa:7b:68:f3:d4:b8:3a:5f:f0:14:c5:11:ea:52:55:
98:e1:59:85:7b:49:c8:b4:a7:88:8e:ea:fd:36:57:
ac:ed:eb:d4:38:a8:2d:33:bf:7f:20:a9:b5:7a:1b:
9d:fa:68:5e:71:99:64:20:eb:b8:82:52:a8:11:e6:
c2:99:23:cf:6d:6e:88:d2:82:2a:a2:1d:1e:54:23:
48:ce:f6:dd:35:04:f8:c9:5a:77:05:c9:cd:50:51:
8b:58:5f:05:68:e9:f6:e9:58:36:52:a2:e2:24:06:
89:c0:ca:09:61:ba:c1:ff:93:bc:31:af:fd:95:a0:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:22:07:37:6C:37:7F:E8:B1:CB:A0:BF:36:77:3F:E1:F9:CB:3D
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:cf:d7:98:9d:a3:f9:39:d4:97:60:5a:55:dd:ba:90:f0:
d5:3c:4e:36:30:5c:d7:b0:9e:65:9c:6e:da:02:a3:e8:ff:e9:
9e:0a:1c:19:96:cf:12:9e:7b:11:5b:4b:50:2a:cf:01:1b:0e:
5b:04:fa:6a:db:25:ea:19:59:d8:de:72:f5:1f:5c:92:2a:2b:
05:29:8d:88:b2:e3:f3:2c:15:8c:87:bc:98:2f:c6:06:c5:78:
93:1e:1a:ed:76:64:41:da:fa:38:c9:12:bc:c7:c3:7c:23:0a:
5f:a8:07:48:70:56:6a:c4:fb:6a:42:55:c9:e3:11:cc:3f:36:
69:94:9a:d5:55:c3:82:bc:26:0b:7f:30:05:fa:b0:a0:ac:7f:
8f:a5:3b:4d:e4:1e:77:5b:7a:30:cc:b6:6d:df:3a:92:38:58:
7d:da:37:38:06:ad:41:ad:9b:ec:6d:b5:87:f2:77:b1:fd:44:
ea:a4:b0:af:7c:83:fc:6f:df:08:fc:60:9e:bd:e6:6a:84:4f:
05:bb:91:be:3b:66:c2:90:be:a6:b7:e7:03:1c:52:25:2e:fb:
92:dc:41:0e:ff:42:50:e0:20:ed:4f:a9:41:2e:d1:f1:68:42:
10:59:9f:e8:c0:67:43:7b:f2:5f:dc:40:a6:dd:ab:97:07:58:
b6:f4:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:18 2025 by rpki-client