Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: 5TvgbU9doXMmQ46Hj3OF81eGVJLjIHrEoCGgpksRYns=
Subject key identifier: 9F:6C:E3:F9:78:D6:C5:A6:B7:BB:6F:9E:3A:6B:DC:B0:71:14:51:B8
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 019A4FCFCF35E1C631CC570A7DC679F2DC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 022D
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: Mz9mpR2gyVG7hmzYZvmMf9pkCeaPz2Ra3Abr3kAhmYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cf:35:e1:c6:31:cc:57:0a:7d:c6:79:f2:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=9f6ce3f978d6c5a6b7bb6f9e3a6bdcb0711451b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b8:01:35:dd:b0:f0:35:70:1d:82:60:26:
7e:fd:2d:22:df:1e:1e:a8:c8:04:a9:b1:93:83:0b:
05:e7:ae:79:c3:de:e4:9f:59:24:2c:f6:74:cc:c4:
a3:c0:48:c5:c9:c0:03:22:30:9f:39:96:18:de:0e:
d0:23:7f:df:f3:42:91:dc:20:d1:6d:8a:f1:c0:e6:
09:13:bc:53:63:82:85:2a:70:28:b0:ff:64:99:70:
98:65:c7:5a:6f:99:f0:bd:e2:db:8b:84:07:41:0d:
3c:8e:ee:27:ca:35:1d:65:6b:d0:48:81:57:36:21:
b1:5b:fe:8b:79:41:45:5b:54:87:d5:f0:ed:af:82:
5b:64:bd:c2:7e:10:0a:3d:4c:94:56:a0:49:7b:96:
39:01:99:85:23:fa:b4:5f:fa:13:68:2a:89:b3:92:
1b:06:75:d2:ad:fb:6e:8e:1e:71:76:ac:5b:09:a7:
36:0d:d7:16:51:a9:bf:24:a8:15:84:0a:d3:20:93:
f9:ae:d4:ad:22:c8:22:5d:0f:75:89:9e:ed:0e:45:
30:4f:66:71:96:07:c7:27:c8:55:e1:00:68:c1:b5:
f8:ed:97:49:91:d1:7d:65:91:c0:91:ae:2d:b5:42:
64:cf:4c:7e:79:e3:db:bb:d2:b2:72:f2:e0:e1:f4:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:E3:F9:78:D6:C5:A6:B7:BB:6F:9E:3A:6B:DC:B0:71:14:51:B8
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f9:87:aa:02:a4:36:c6:e0:35:a4:cd:53:a3:86:48:15:24:
fa:b2:95:39:ae:eb:06:f9:b2:11:a9:0f:0e:b0:9c:dd:53:84:
25:a2:a1:36:98:cb:06:4c:c5:e8:73:59:74:ce:46:7d:eb:1b:
18:73:f1:4a:3a:5b:2b:d8:04:4c:02:82:5a:6f:ea:46:91:bc:
19:53:02:3c:e7:38:a7:0d:0f:ea:45:d2:42:3e:5a:06:c4:4d:
32:90:91:9b:39:80:87:32:98:06:15:df:7f:da:ed:7d:f1:aa:
22:3a:d1:69:8a:73:73:fc:17:49:92:5c:9a:76:e4:bd:9f:90:
58:29:4e:c2:e1:1c:d7:a9:9f:85:62:d8:2a:4c:8d:5e:2d:d1:
9f:b8:03:b9:af:b8:2a:d5:f0:1b:20:13:1f:83:9b:a2:41:59:
2b:38:16:ad:1d:28:28:19:83:28:10:57:43:03:51:31:52:6a:
73:ef:e5:91:a0:d8:16:d8:ec:28:18:31:51:9f:0d:c0:76:3c:
43:e3:35:7a:f6:bc:58:bf:9e:10:32:41:d7:0b:a9:dd:82:92:
2c:61:e4:e6:23:6c:be:d9:c2:b7:42:15:30:e9:e5:d2:15:94:
a2:f6:6b:9b:cb:be:7c:53:dc:b8:da:e5:19:32:a4:86:1d:25:
05:65:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:21:27 2025 by rpki-client