Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: gzLnSSYfejEf0q9frrmEr+0ikpfOj6JBxuE0wL0OSaw=
Subject key identifier: CD:16:D3:20:F1:2A:DF:8A:50:58:3D:62:8D:48:22:43:AB:DF:A9:E7
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019A4EF47EB1A0F7BEF8A647C50FCD21049B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 08BE
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: 1+CY5afz9WTjtKk0c87kbqipLqNznnqIDK0SLYQUeHY=)
4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7e:b1:a0:f7:be:f8:a6:47:c5:0f:cd:21:04:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=cd16d320f12adf8a50583d628d482243abdfa9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:5a:81:01:d7:7a:6b:09:f4:e9:63:98:60:
6b:57:50:e8:f6:cc:b7:97:3d:3e:19:e2:a8:2f:87:
d5:8d:15:6a:a6:48:82:ee:72:6e:7a:b8:11:8e:df:
95:ee:30:d3:df:dc:d7:69:0b:ac:65:93:0f:93:cc:
bc:fb:f1:1e:ac:42:f9:4d:29:a8:7b:ba:fe:5c:3b:
20:1a:58:3d:5f:db:e9:85:93:5a:9a:ea:c6:bb:ab:
8a:12:57:ea:aa:fd:80:ad:44:12:88:cf:b1:e0:2b:
2c:34:d9:ba:c7:77:d7:d4:b0:45:37:6a:2a:b1:36:
20:d3:22:a9:48:b1:a3:b5:fe:69:f1:a3:cd:ad:a1:
5a:37:15:39:66:6e:08:d9:55:61:a6:5c:81:7b:15:
c5:eb:21:37:3e:6b:d1:f9:ea:ee:13:32:d8:8e:1c:
cc:83:fb:42:7a:83:d4:68:41:1e:e3:84:50:a6:73:
0c:17:88:ac:bc:3b:c1:b2:8d:02:92:8c:b5:b2:01:
0d:7a:dd:52:ec:82:9b:eb:2a:58:ff:eb:76:46:3f:
46:a7:9c:ad:f4:4a:f6:8f:51:80:80:7d:6d:a7:11:
80:ed:64:5c:8e:f4:43:9d:6c:fb:9a:7a:eb:1d:f6:
f2:c4:cb:68:72:e0:35:ac:50:9b:21:1d:57:71:7a:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:D3:20:F1:2A:DF:8A:50:58:3D:62:8D:48:22:43:AB:DF:A9:E7
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:68:30:a6:a4:bc:76:24:25:e3:80:4d:8b:8e:c2:81:eb:cc:
e2:88:39:d5:85:41:9e:ba:51:c8:d7:a3:90:04:09:d4:43:fe:
a5:4d:c9:4a:ac:18:fc:bc:22:16:9d:1e:67:55:2e:c2:8d:d6:
df:9a:e2:a5:12:a0:15:da:82:24:8a:ef:fe:ad:fd:2d:ff:87:
5b:a6:b4:b2:3e:fa:e2:05:64:14:bc:8f:1e:c8:2c:3f:0f:68:
56:1f:d8:bb:34:5c:3b:22:d6:21:dd:73:e0:9a:ea:1f:5b:bc:
e6:d8:db:4a:68:ff:a7:07:7a:2f:87:75:0a:d2:03:82:24:73:
b1:f0:10:57:bb:48:f6:cb:11:81:77:49:35:37:f6:85:45:74:
31:ef:e0:b2:e0:57:dc:28:b6:56:d9:09:5d:ae:0c:08:d1:aa:
26:4c:e9:b9:3f:e9:75:2e:9e:5c:e7:db:1e:7c:e5:8f:99:90:
66:be:9b:0d:7e:ba:09:4e:43:e1:64:33:e3:42:fe:52:2d:fc:
08:ab:4a:e4:59:72:0b:b1:a3:f7:f4:0e:54:d9:45:74:07:20:
35:29:ec:ad:80:6a:e4:28:bf:1f:59:48:3f:1d:30:58:a3:9c:
26:97:4f:6c:19:28:72:b4:8b:df:92:40:7f:39:f6:a7:b1:72:
e0:80:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:06 2025 by rpki-client