Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: ow9H7niKbyv0aOBNr7hdmUUliEfhJrNXbzWSRCbNBIc=
Subject key identifier: 37:6B:3F:5B:32:2B:05:B6:D4:18:1A:B7:11:50:69:76:2A:2F:F2:69
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019A5150B41A698DA07535826566B331AE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:34 +0000
Manifest this update: Wed 05 Nov 2025 00:00:34 +0000
Manifest next update: Thu 06 Nov 2025 00:00:34 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: kID3v8GvQ22PpZ3hvEccFg+aa39ZnaGIGLcqHtOkVtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b4:1a:69:8d:a0:75:35:82:65:66:b3:31:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Nov 5 00:00:34 2025 GMT
Not After : Nov 6 00:00:34 2025 GMT
Subject: CN=376b3f5b322b05b6d4181ab7115069762a2ff269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:2a:77:e8:dc:c1:05:60:94:57:36:39:66:
e2:24:01:62:82:73:cf:2b:1e:ba:11:73:95:20:c8:
f7:e5:55:67:74:63:cf:e2:ee:83:25:2d:ce:ab:3e:
b6:85:64:4e:d2:c5:54:43:59:1b:11:25:97:56:78:
fa:c8:a4:cf:2d:e2:d6:fd:c1:81:4f:86:b7:3a:9a:
35:1e:16:92:ee:8a:d4:8e:17:79:12:1e:c7:df:03:
b7:aa:2c:70:3b:8b:1c:c9:b6:ab:8b:d6:71:e5:0e:
52:6e:d5:a6:ea:cf:0d:7d:ad:c8:94:0c:57:13:d7:
bb:de:5b:eb:d4:1e:d5:95:ae:1b:67:62:3c:e6:84:
66:a5:70:84:b7:e6:7f:34:52:9f:a6:5a:a7:c7:31:
7a:0e:f3:47:e3:30:0d:0a:e7:f8:cc:8c:2b:ce:98:
02:c2:1c:7c:7b:46:b9:9f:17:81:24:d0:53:ed:0f:
ad:88:b3:54:18:4d:7b:27:c1:a6:aa:8d:19:4f:7a:
b2:5a:15:12:cf:3e:44:4b:97:81:37:9d:fc:ca:a6:
3c:68:36:2a:8d:30:e5:ae:b9:48:95:3f:61:1f:c6:
2a:f6:3d:d7:81:49:cd:ec:9c:5e:ef:ea:8d:28:63:
31:6f:15:0d:d7:eb:62:9f:75:0e:03:64:dd:e2:4c:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6B:3F:5B:32:2B:05:B6:D4:18:1A:B7:11:50:69:76:2A:2F:F2:69
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:53:10:b1:3c:2c:e9:cb:4b:a2:51:fd:0c:bf:1f:ea:60:cd:
bf:71:7a:4a:30:5d:e2:7c:bf:bb:35:51:49:38:6f:23:27:16:
f2:74:33:6d:4b:91:68:11:57:0b:ef:89:be:64:a2:06:ae:76:
f9:a1:93:21:53:ca:db:48:60:9e:03:e4:a0:88:8f:4d:1e:81:
3a:a2:02:a9:93:c4:42:9e:6a:23:5b:84:50:78:eb:a6:db:93:
1f:8f:d0:e6:c0:1b:04:19:8a:ba:c4:8d:fc:e0:57:2f:59:d0:
64:a2:4c:ee:fe:4a:59:d8:4d:3c:47:31:a1:eb:33:3c:56:79:
d8:3d:86:bd:3c:24:9f:6a:52:68:c9:7a:83:1d:8b:77:6b:ce:
cd:a8:af:9f:fc:e0:18:cd:22:50:b9:a8:92:be:40:bc:93:08:
3b:5a:c9:4e:a4:dd:11:18:50:4d:ac:24:6a:41:74:ad:8b:3a:
3b:8e:dc:c1:33:0d:33:62:7b:2c:21:c9:b8:70:84:1a:dc:b1:
ee:0c:f9:37:76:ca:ff:bc:c3:af:e0:38:6b:1b:e3:70:8e:57:
a1:45:31:f2:08:86:e2:97:ee:a6:0b:11:eb:c4:4b:a9:22:48:
f4:6f:3c:48:1a:23:7d:07:2c:a8:47:9d:6b:2f:4b:39:cf:b3:
72:42:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:56 2025 by rpki-client