Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: o/fYUV3nPS/bO8ICbiZNG91aupOWZbC914sfc8ssy+0=
Subject key identifier: 8D:4E:20:36:9E:78:15:3B:EE:EB:88:16:31:7D:D4:36:AD:4A:14:10
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019A526351FDA95FCF5017F16969115AD51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 101E
Signing time: Wed 05 Nov 2025 05:00:31 +0000
Manifest this update: Wed 05 Nov 2025 05:00:31 +0000
Manifest next update: Thu 06 Nov 2025 05:00:31 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: Mmaetc3LXlUvx4j41UJGrJG2RT/U1DolBx1aqittQH8=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:51:fd:a9:5f:cf:50:17:f1:69:69:11:5a:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Nov 5 05:00:31 2025 GMT
Not After : Nov 6 05:00:31 2025 GMT
Subject: CN=8d4e20369e78153beeeb8816317dd436ad4a1410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:9d:b5:d6:9b:1f:30:02:71:be:a1:f2:09:
65:7e:3f:06:00:85:bc:bc:79:8e:36:6b:c7:9e:9c:
58:74:b2:68:fb:2a:23:b5:dc:b1:83:b4:e0:ea:1d:
4c:5b:d0:56:4c:7f:95:15:4c:d7:7f:e6:0d:56:45:
6d:1f:68:2a:ae:4a:81:07:5e:ff:a3:c4:48:3f:ae:
31:0a:a1:03:a1:52:a0:6f:3e:8b:ff:b3:26:5d:de:
12:0c:da:c0:f0:71:9c:3c:de:48:fd:00:02:3d:2a:
15:82:78:dc:3f:c9:f7:0a:b5:ef:6d:48:b4:c7:ae:
86:a5:e8:8d:12:35:74:38:d4:33:35:12:0c:97:9d:
84:db:ec:84:f2:1b:4f:89:bf:f1:61:62:ba:c2:30:
3d:e9:9d:ef:91:7a:da:c7:20:3b:28:a2:02:cf:8a:
35:c0:1c:12:09:1f:b7:c5:20:7a:3f:cd:35:7b:4f:
44:34:ac:07:7c:46:a4:2a:ba:3a:de:ab:01:cf:97:
e2:b4:70:e4:c8:11:89:46:14:cc:ab:a3:a2:4b:f6:
7b:8c:39:cb:1d:79:c1:18:91:ac:6e:54:79:a8:a2:
7c:e1:97:14:1e:6a:5e:27:f1:5c:b8:0e:22:8a:eb:
10:30:c2:bf:b6:ef:a0:2c:c8:99:fc:6d:85:05:8d:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:20:36:9E:78:15:3B:EE:EB:88:16:31:7D:D4:36:AD:4A:14:10
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:5e:48:60:02:4b:0d:b9:d0:20:b1:21:40:f8:24:d0:ae:
3b:b9:f4:98:f3:f8:e6:69:83:a2:79:b9:71:6f:96:e7:fb:aa:
94:5c:15:a7:6e:ea:92:dd:af:e7:4d:88:b3:f8:c8:88:83:85:
6d:f2:08:60:29:c9:5d:66:cc:ed:9a:92:3b:ee:e3:8c:cb:33:
f1:d2:4d:6f:92:f9:e8:ce:eb:3f:50:0c:58:2d:bb:66:88:eb:
b6:75:c1:67:b7:5d:46:31:b0:b8:a2:67:01:e9:d3:fc:93:e3:
9f:65:09:cf:42:65:ad:58:cc:77:24:81:a8:1d:52:f7:64:42:
e0:bf:b4:44:54:e8:41:9c:02:0a:fa:55:6a:e6:4b:fd:d2:d2:
a5:f8:1e:06:f3:e0:e4:b2:95:a7:fd:6c:b6:63:1d:8b:f7:2d:
7b:75:f5:75:3f:58:e8:b9:5b:01:15:50:2a:bc:80:fa:45:25:
87:ec:bf:47:31:ab:80:14:5c:01:fe:c1:6c:9b:11:f2:0e:a6:
bb:bf:cd:51:f5:02:07:fd:e7:7d:d1:ce:0c:fd:44:3c:16:92:
bc:e9:92:ba:8e:35:b9:3f:04:5f:73:cb:57:ea:56:d1:63:84:
30:d8:6a:8d:7b:83:3b:64:4c:f2:b3:ff:06:e1:81:ac:1a:99:
02:61:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:41 2025 by rpki-client