Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: ONYZxlGlTJJJquYo2EeuZX4ZEZiI6Sc72/Z4wRDpQv0=
Subject key identifier: 4A:55:FB:CA:67:92:18:60:E0:03:86:FD:F5:82:85:11:81:AA:FC:DD
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 019A4F9971D349EBACA848BC8A81375A258E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: OA7scivULaTvG0R/M7DYDa4zOHKhVwpInWWVmXHx/qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:71:d3:49:eb:ac:a8:48:bc:8a:81:37:5a:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=4a55fbca67921860e00386fdf582851181aafcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:3f:76:c2:a7:d7:6c:93:11:a3:ab:fb:73:
ce:0e:63:6b:cc:ed:c2:0d:aa:61:ae:79:11:59:12:
23:b4:6c:b2:f2:d9:d3:f6:d6:5f:1f:38:a1:ed:e9:
29:70:95:61:1b:39:c6:e5:33:c1:1b:98:ed:32:8c:
c8:c0:0b:b1:f3:a0:70:99:11:fa:96:a1:8a:38:2d:
37:f5:6a:6d:fb:8b:1e:27:b8:84:cc:74:35:9d:95:
8d:8b:6c:51:75:d8:af:b2:ca:c7:e5:5c:8f:27:21:
3c:bb:3c:02:5d:42:85:53:01:49:63:0d:dc:71:36:
f6:ba:88:39:0e:6e:c4:aa:4f:55:85:8a:c6:89:15:
f8:93:15:3a:52:c7:2c:f9:12:09:b9:ce:a9:03:b4:
c6:d1:0c:26:24:7f:77:73:5f:bb:ba:43:ea:4c:68:
c4:e1:8c:85:4d:66:3f:d8:35:5e:68:41:05:be:01:
60:dc:29:b6:61:e1:d5:e8:6a:65:74:70:fa:4e:07:
21:b6:d3:d0:0c:79:26:b3:2d:ac:d2:83:d3:a3:3f:
18:d2:74:ed:cf:54:c2:91:c4:52:bd:ac:f1:03:7e:
7e:ef:b8:86:67:c3:84:c4:cb:9c:37:06:41:8e:29:
d7:26:ba:a2:94:8b:e8:06:3a:c1:1f:20:f8:fc:0a:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:FB:CA:67:92:18:60:E0:03:86:FD:F5:82:85:11:81:AA:FC:DD
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c3:37:87:77:41:79:9e:2d:70:87:d3:38:54:3d:3e:8f:e7:
cf:01:27:7e:8b:c4:07:94:7b:47:e6:07:31:8f:aa:25:a6:97:
21:93:06:0b:8d:0f:96:ea:f5:c6:15:52:55:56:b4:af:b2:39:
2a:87:a1:1e:d7:0b:13:2e:9c:cb:3d:4d:8c:99:70:d2:1d:24:
8d:c8:c4:46:8b:b5:d1:d0:47:81:d6:00:5e:33:ac:00:63:73:
24:0c:f0:3d:27:51:ee:52:f6:04:a9:9e:56:a1:dc:8e:50:df:
05:84:12:ca:90:33:fb:d1:99:d7:95:24:6a:ea:f2:d0:db:af:
06:af:5a:5e:da:de:00:4d:e9:40:f2:19:56:26:35:a4:6c:c7:
0a:22:f6:f0:c1:84:a0:00:5f:75:bc:6b:06:88:b6:6f:28:c0:
b3:9e:5c:c7:d1:ab:b8:af:81:b4:cf:6b:59:3a:97:8f:2b:88:
b5:87:25:45:26:84:06:98:01:e4:f1:34:11:e4:64:ad:f9:98:
0c:11:c0:ba:b0:98:5b:05:ab:22:70:a2:ab:cb:60:d0:52:36:
ec:4e:96:de:66:ed:8a:c9:2e:74:91:f5:e5:72:76:0a:60:a7:
ec:9a:3c:a2:ac:92:92:40:62:f2:db:f2:66:1b:51:11:c8:1b:
b7:ec:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:49 2025 by rpki-client