Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: ipuc7fwLvbM8rJ9HAbtZGTAK4Uap8Z5dqNZulD/LFiU=
Subject key identifier: 04:E5:D8:C5:27:E3:35:68:60:67:18:54:B4:D4:22:B9:14:FF:F5:1D
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019A56E4A1CECAEAFF9A1B81D881941EA8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 1711
Signing time: Thu 06 Nov 2025 02:00:15 +0000
Manifest this update: Thu 06 Nov 2025 02:00:15 +0000
Manifest next update: Fri 07 Nov 2025 02:00:15 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: jo8RPS8OkB83DAnaCAoyWjbADtMprNntSNYTcBwaaAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:a1:ce:ca:ea:ff:9a:1b:81:d8:81:94:1e:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Nov 6 02:00:15 2025 GMT
Not After : Nov 7 02:00:15 2025 GMT
Subject: CN=04e5d8c527e3356860671854b4d422b914fff51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:80:2a:7e:56:c9:00:12:ea:70:9d:79:8f:
dc:1f:2c:3f:f9:54:7a:08:e2:5b:58:15:01:4c:49:
5b:ef:53:cd:f3:49:2e:be:bb:a2:34:e6:b2:cf:b4:
da:5e:7f:de:66:14:d4:82:0d:87:68:5a:ab:a8:65:
49:bb:8e:a8:6d:fd:16:f7:8a:39:ec:86:6f:86:28:
d3:6b:80:29:a8:9f:10:e2:93:4b:33:86:20:15:54:
76:e8:48:e7:40:2b:44:cc:40:9e:31:c6:93:9f:36:
41:26:5e:71:dd:ab:21:b6:aa:9d:7d:fe:13:20:29:
35:7b:a9:6b:8f:79:80:19:73:b4:42:a0:48:7e:fc:
c0:e7:97:44:8f:28:47:a0:de:c6:78:5d:91:69:61:
4f:80:20:cd:45:73:d1:7c:3a:7f:73:d3:16:76:13:
e2:f1:ba:5f:4a:a0:1d:39:b8:e0:4c:f3:21:32:7c:
54:ba:50:51:9f:a2:2a:f2:47:70:23:78:54:40:3c:
8d:9c:86:14:32:31:0b:a4:67:ed:ef:65:98:5f:5f:
1b:25:3d:f0:e6:8e:54:09:36:72:c1:7b:99:9f:76:
0a:c3:19:04:54:46:e9:0a:a2:8b:99:0a:87:9a:cd:
87:3d:90:f0:ca:1c:09:5f:04:d9:54:10:58:6b:07:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:D8:C5:27:E3:35:68:60:67:18:54:B4:D4:22:B9:14:FF:F5:1D
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0c:be:dc:61:ef:4d:6e:7c:61:c0:ca:82:fa:aa:f5:f1:22:
47:4a:3e:3c:79:44:99:75:b0:89:99:99:df:0b:ee:82:cb:f8:
1d:37:00:37:64:ff:c8:d6:08:fb:03:ce:14:0b:21:81:32:62:
10:c3:d3:95:9d:57:65:24:f9:d3:b3:35:cd:0d:d2:f1:34:7d:
e6:d6:6f:8d:82:5f:64:fe:8c:67:d1:ec:89:bb:14:01:b8:9b:
0e:c0:bf:3a:1c:6b:d3:cd:3c:47:cb:da:c6:25:eb:79:ca:20:
72:d7:85:a6:f6:74:a6:98:53:06:9a:fe:9c:05:19:0b:18:82:
e8:b2:ed:d9:95:a5:19:54:bc:9b:3a:7c:61:8b:68:4e:e2:0d:
4c:51:be:2c:44:74:26:d7:6a:24:4f:f8:b3:54:53:bd:c4:78:
83:24:a8:e7:11:10:80:e4:b3:ec:68:b0:dd:27:03:68:fe:6e:
96:83:e4:1b:c9:b1:e8:42:de:c4:fa:92:22:0f:7c:90:11:71:
5b:23:93:aa:f7:8b:db:b0:22:19:ea:5b:b7:d8:cc:41:27:02:
4e:b2:46:05:93:d4:73:d4:d9:60:29:4e:46:48:a3:cf:45:ae:
c6:66:e9:6a:8f:d6:80:6f:94:d5:7c:06:ee:c5:2b:fe:46:29:
1c:d6:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:54:12 2025 by rpki-client