Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: eWNL+csiy2yklJg3Al0JLbbNciEWkEYxjceV7T5P7/c=
Subject key identifier: F2:FA:43:06:BD:CA:6F:EF:E9:72:E1:15:F9:1E:E6:93:66:3D:91:F2
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019A5299F175E3980EB7CFE6DA3C4B3A607E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 1326
Signing time: Wed 05 Nov 2025 06:00:11 +0000
Manifest this update: Wed 05 Nov 2025 06:00:11 +0000
Manifest next update: Thu 06 Nov 2025 06:00:11 +0000
Files and hashes: 1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: GHDZ9Q9o9V8mX3XGIJegEiw1MIIxX/1JRodp8o+qpI0=)
6: gp9nHU_cukvMULZAvDnIuT6ptiM.roa (hash: 7wIfWYcUlSAbfRukKEeXPASEhd8fL4WRrL0l2D1YuTg=)
7: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:f1:75:e3:98:0e:b7:cf:e6:da:3c:4b:3a:60:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Nov 5 06:00:11 2025 GMT
Not After : Nov 6 06:00:11 2025 GMT
Subject: CN=f2fa4306bdca6fefe972e115f91ee693663d91f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:a8:39:f0:53:56:8d:61:4f:fa:a7:b3:74:
0a:cb:89:5b:16:2a:f3:ef:27:14:28:3e:bb:82:eb:
29:92:7d:5f:27:a8:eb:54:47:c7:23:db:c2:e8:ce:
4d:37:e4:25:d8:98:2e:71:eb:d9:54:e0:a1:dc:ff:
da:63:5d:0a:e0:4e:86:80:d5:b7:8c:24:e4:88:b1:
21:d1:cc:b6:7b:61:0c:7f:f7:93:4e:ed:d8:e2:29:
46:03:17:b4:d5:73:6a:33:94:47:1a:72:63:f7:47:
ad:43:6d:85:30:e5:73:37:4e:19:65:a7:97:ea:1a:
31:0f:47:87:4c:de:3f:dc:5f:62:bc:ca:fd:e2:5e:
ab:bf:89:46:a8:9d:4b:07:34:4e:ad:9d:e7:e3:b6:
dc:fb:3b:e6:f5:dd:9c:61:fb:d7:16:9d:35:1b:4f:
84:c0:da:df:9b:b5:db:0c:2d:8b:85:21:2a:b5:dd:
1a:7c:ec:2b:6e:cb:0e:3f:cd:66:0f:9a:b9:4a:e7:
f0:d5:58:3c:ad:11:f9:ec:66:36:3e:ad:bf:6b:66:
5a:11:49:af:a3:d5:11:f4:b8:20:e0:6e:3c:b8:91:
3b:93:05:67:22:63:a7:bf:0a:63:55:4c:f8:a7:c6:
92:75:11:5e:2f:c0:9f:59:c2:75:8f:1f:44:a6:f2:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:43:06:BD:CA:6F:EF:E9:72:E1:15:F9:1E:E6:93:66:3D:91:F2
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:94:18:8b:1b:e8:28:93:c7:7c:fc:7b:f0:09:fd:76:87:47:
56:e7:c2:5d:88:66:83:b9:79:75:fa:13:c2:b0:ad:2a:f8:8d:
3f:80:8e:fc:8c:be:9d:73:1d:d4:e5:41:31:55:94:65:d1:1e:
2a:bb:a8:5f:c4:ab:a7:c5:e3:84:78:e4:e8:35:f6:13:b8:93:
44:fe:97:64:bd:b7:11:2d:77:f7:0f:d9:2e:e9:f5:6b:ba:e4:
34:25:b2:2a:e0:36:90:28:b8:b6:45:70:1f:41:b4:74:d7:24:
83:98:50:d3:1e:0d:d6:6b:9a:30:c5:91:7c:eb:68:20:37:6c:
ab:d8:93:0f:20:fa:2f:9c:02:68:15:8a:76:5f:34:8c:ca:4e:
fb:0d:6e:47:da:e5:c7:37:25:13:fb:ce:e5:13:aa:e8:74:9e:
9b:ee:c6:d0:c9:62:30:a9:7b:23:c9:17:4d:b9:81:bc:24:4a:
51:27:ce:e3:02:86:c8:4c:37:7f:75:35:0c:42:15:12:8f:34:
44:84:8d:82:46:47:dc:6a:2d:ea:4d:d8:31:80:df:22:03:49:
fb:78:e7:70:a3:54:28:36:83:51:22:c9:f3:cd:cb:15:77:ab:
fa:ae:29:8b:74:ae:57:27:6e:4c:56:6e:15:56:48:97:fc:ca:
f3:dc:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:43 2025 by rpki-client