Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: fuypvPKLvg8s4Pn5qfzF+mbe+s5wiwWOSMuZbycJnVc=
Subject key identifier: 37:BA:BF:70:BF:F6:BC:7C:0D:F3:21:76:3C:8E:66:6A:77:06:AE:F8
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019A4E4FCD651C47EE1FA51FE6381C699D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 03B8
Signing time: Tue 04 Nov 2025 10:00:44 +0000
Manifest this update: Tue 04 Nov 2025 10:00:44 +0000
Manifest next update: Wed 05 Nov 2025 10:00:44 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: 3gv+lSIJKre74QS5Jr7NEHLjvwVtbb4YSd7CFa46sEM=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cd:65:1c:47:ee:1f:a5:1f:e6:38:1c:69:9d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Nov 4 10:00:44 2025 GMT
Not After : Nov 5 10:00:44 2025 GMT
Subject: CN=37babf70bff6bc7c0df321763c8e666a7706aef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:20:32:cd:5e:d3:da:32:d7:fa:54:22:43:
f5:0f:a9:49:6c:0b:1e:cf:6b:32:f1:67:09:db:ba:
1f:53:56:d6:0e:8a:3c:f8:c5:e1:8a:e8:ec:38:63:
c0:0c:8c:06:61:6a:72:49:0b:cf:07:12:f9:d9:96:
3f:2c:39:14:2e:d8:ee:ca:57:a3:35:40:fd:d3:36:
3f:7b:92:17:68:f6:dc:c8:9f:8f:b4:65:83:03:af:
57:41:be:ed:b7:1d:4e:ce:e1:08:61:05:34:a2:bf:
3e:3b:0e:37:f5:be:9c:58:cf:dd:96:69:ce:ca:42:
51:b6:a0:b8:52:32:8a:69:38:c1:e0:6d:f8:aa:3a:
f8:a1:29:33:f0:6c:06:06:61:04:fe:fd:06:29:47:
91:6d:78:ce:f6:42:6a:07:0f:04:8f:5a:94:68:72:
2a:e6:52:92:81:15:61:70:a0:3c:f0:25:a5:ad:fe:
99:d0:61:f4:d5:61:8c:dd:cb:3c:1e:b3:6c:7d:43:
45:0b:6c:8d:18:4f:5f:9e:29:5c:54:54:81:60:9a:
b3:34:e7:3c:49:07:05:b1:96:cb:54:b4:22:85:79:
cf:e2:0f:52:de:ff:15:b5:27:62:b5:03:e6:b3:7d:
4b:d0:60:fe:b6:8b:18:82:d5:f4:b7:d9:90:42:b5:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:BF:70:BF:F6:BC:7C:0D:F3:21:76:3C:8E:66:6A:77:06:AE:F8
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:18:b9:93:4b:b6:4c:17:14:92:af:c6:85:24:2f:fe:69:
cd:f5:68:d4:d7:5b:33:70:bd:02:f2:7e:27:40:63:5e:f3:11:
5b:39:4a:03:2e:6a:b7:ef:6e:8e:4b:4f:a3:1a:47:7f:0f:4d:
6c:b7:6c:69:ac:ee:09:6c:0a:54:23:26:ff:8d:00:8e:19:57:
7d:e2:c8:ec:6d:fd:7b:48:1e:a7:35:3b:94:15:60:be:6c:86:
4e:66:2f:13:43:e4:ab:ed:bf:07:21:ed:bf:05:48:43:69:40:
b4:b0:02:82:84:2f:9e:54:ff:75:b0:87:b2:8b:5e:66:f9:cf:
1a:32:8d:2c:74:f4:e3:6e:c0:a6:a3:90:09:0e:9c:a9:f3:e2:
4e:f8:8b:b8:dd:d1:ef:94:df:ae:67:b3:6f:3f:4f:6d:56:39:
22:87:cb:96:d2:1e:4d:4e:6c:d6:c3:1f:8d:95:af:17:36:29:
50:a6:91:c7:9d:b8:f2:56:b6:36:1a:dd:a7:ac:70:03:53:6d:
79:64:7c:a0:b2:fc:8a:53:64:88:54:e6:fd:39:6b:db:c4:3b:
16:b1:0b:9b:12:15:76:ab:88:26:9b:d8:36:1c:e3:d1:6e:e2:
a9:32:22:bb:cc:87:c1:ec:ad:f8:a1:a1:58:06:8d:9f:d6:ae:
06:19:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client