Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: MqMKP6HbKT2hCQut8TE3pfD8B5m0tQnHG+22hz8Ur8k=
Subject key identifier: 4F:64:DF:96:6D:1C:BB:CD:5A:13:9A:44:D8:D5:F3:A8:51:11:8C:0A
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019A4F9901B9CDACED85049BA33A913361B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: KZIUSongntyb8cmh04ohuVf-RH4.roa (hash: EqZXG+hM0Nf7quHml742UmbfXBrPEdr6jmp61c5zxV4=)
2: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: qunTcCOyg3TbOT7g9iEAQfJqEEtXcNGy86M9oda2kA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:01:b9:cd:ac:ed:85:04:9b:a3:3a:91:33:61:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=4f64df966d1cbbcd5a139a44d8d5f3a851118c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:2b:8c:1f:d0:7e:11:2c:bb:05:68:66:d9:
8d:60:c3:09:27:de:6f:73:2a:4f:a0:7d:66:4f:6f:
40:6b:4a:c9:be:b6:9f:e8:7c:6d:86:a1:31:01:8f:
3c:c3:84:e5:0e:a1:5c:d9:31:1d:34:7a:b9:bf:6d:
38:26:ba:af:a0:1b:04:72:b8:af:2a:3c:ae:04:83:
14:2f:94:c6:39:ba:6b:36:ef:49:5d:e4:06:c0:bd:
65:a7:20:9b:38:47:e3:83:8d:db:5e:a8:a7:56:72:
2b:0d:06:4e:74:ea:1d:11:a2:01:31:bb:54:67:c1:
26:55:0b:ac:2d:00:37:5c:50:36:36:b6:aa:e6:91:
61:a7:8f:6a:08:bd:12:d0:f5:f2:3d:cf:01:2c:6e:
f0:d0:b9:ca:82:83:b1:93:68:f1:8f:ee:08:91:30:
aa:1d:0f:e6:99:7f:68:ad:72:45:e1:4e:74:e2:cd:
d3:81:02:ea:c1:30:62:a5:b0:13:f4:f3:6e:78:99:
22:ae:c3:7e:46:77:37:fe:4d:7c:80:18:35:eb:05:
4a:a1:61:c3:14:24:11:63:20:52:f8:05:9c:b0:73:
84:2b:01:77:ff:f6:cd:f2:53:ff:2b:b2:50:58:75:
28:93:d4:d4:12:c7:41:92:ea:38:b0:c4:79:e0:38:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:DF:96:6D:1C:BB:CD:5A:13:9A:44:D8:D5:F3:A8:51:11:8C:0A
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:53:ee:74:e5:9a:f9:d0:70:f2:73:17:63:3f:30:71:aa:
4d:e3:83:11:ba:ef:e1:97:25:a2:2e:f1:8b:56:ae:82:d0:71:
94:65:33:9b:56:1a:39:b2:9d:13:dc:28:e1:14:90:cf:29:4f:
8b:da:0f:ff:86:f8:bc:77:5f:9b:2f:5d:7d:cd:c8:d3:ab:4b:
0e:f9:b6:7e:90:81:81:f0:25:7f:8c:d7:7f:21:7e:21:71:b2:
88:f3:38:f6:31:87:a1:e7:0f:21:77:29:14:44:86:30:ca:7c:
91:0e:91:17:c3:d1:97:05:08:4e:a6:69:06:45:eb:0e:41:c5:
a2:16:c7:5c:75:29:d3:f5:91:a0:84:f0:6e:8f:40:c7:d6:d9:
b4:0a:d0:93:31:b3:4e:b6:c4:1b:5d:4c:28:ea:c9:55:89:33:
bb:4f:d0:b3:d2:15:5c:bd:f6:39:60:79:74:79:7d:b7:15:09:
a8:f8:7a:2d:60:b4:7c:da:8b:f8:1b:67:3f:1c:a4:34:88:28:
5b:c0:85:c4:b3:b2:5f:a5:ea:d2:21:67:08:98:ae:8d:e8:da:
ff:2b:58:74:4b:ca:5a:c7:2c:57:ca:40:34:6b:c2:bc:0b:5f:
83:9e:4e:8f:18:37:8e:0a:26:d8:2a:ad:9d:b3:bd:2c:0e:8c:
0c:47:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:55 2025 by rpki-client