Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: U1cfXRK0BjeCDDd4d1+GT5gdCv+8Wcya3FiIjrUM7jQ=
Subject key identifier: 6A:D3:18:AB:E4:58:D6:64:42:5A:37:31:39:97:01:E3:B0:00:CD:C5
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019A503E2308D60A61FE086CF9A90F006BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: LK4FGoWFPLnt1DoUVqODYYyDEBiTFFAEYjuc143FXNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:23:08:d6:0a:61:fe:08:6c:f9:a9:0f:00:6b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=6ad318abe458d664425a3731399701e3b000cdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:f9:21:0a:5c:6c:78:b8:d4:02:b1:10:94:
20:15:a4:08:42:e5:99:54:73:d8:94:d7:df:91:a9:
e6:ef:8a:bf:28:81:62:7d:ad:06:d8:31:57:24:6a:
51:01:c0:84:47:47:ad:29:e4:5d:d8:de:52:49:6c:
38:cb:03:93:c2:e9:75:dd:8c:5f:c6:f6:30:d9:ea:
59:7f:ee:ed:5c:73:79:3c:50:64:0c:91:70:8b:5e:
2d:db:96:6d:b6:c4:be:22:87:e2:04:2d:57:6b:ec:
f6:8a:60:bc:92:22:9c:61:50:cf:b9:ac:3e:72:3d:
a0:f5:ed:95:1b:70:81:8a:0d:dc:f5:ca:7f:26:99:
90:c5:db:8e:e7:72:9e:6b:55:70:48:18:ed:90:5a:
7a:48:03:af:2d:dd:8d:32:b0:e4:d1:1c:5e:48:ef:
6b:98:0b:46:81:1d:a2:03:7d:89:ec:e7:7c:c2:08:
ee:e7:0d:99:f1:c8:7d:a6:a1:d5:7c:42:17:2d:9f:
ee:fc:ce:df:b5:ae:e9:be:0b:53:7f:a5:46:6d:2b:
42:c7:f1:1a:d1:88:95:0b:ed:b5:52:91:9e:89:56:
1c:c1:58:2c:60:68:78:fd:d9:7b:0e:93:33:3a:ce:
26:58:28:dd:56:06:48:75:8b:5e:2e:1c:28:f6:f6:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:18:AB:E4:58:D6:64:42:5A:37:31:39:97:01:E3:B0:00:CD:C5
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ea:e9:f7:c9:32:fb:10:2e:a9:48:99:d6:65:57:45:7e:91:
e6:a4:71:8d:fd:49:12:f1:15:95:53:3a:15:78:a0:29:af:51:
b8:1d:31:10:f5:b9:32:4d:cf:6e:17:8e:31:c6:48:92:e0:86:
23:9f:ee:10:d0:57:9f:25:82:5e:1e:ae:90:62:12:fc:14:27:
87:d9:32:28:2e:1c:8e:8b:8f:d9:fb:9a:b9:ef:a5:ec:27:31:
16:8c:68:bd:77:a8:90:33:6f:22:ad:3f:0c:60:4f:ca:53:64:
a8:cd:5e:14:22:4d:5c:59:5f:37:75:56:bf:60:f3:7e:78:de:
d7:a7:f1:8a:f1:a9:39:95:70:c7:1f:e2:3a:2e:57:06:17:d4:
e7:56:b8:6d:8e:0a:55:e2:50:0a:52:4e:10:73:64:72:16:16:
02:2d:6b:a3:77:78:4c:1b:77:2c:a9:09:34:b2:75:42:31:29:
c1:30:55:39:8a:0e:53:2d:f7:2d:97:ce:9d:bf:1a:11:08:80:
39:07:b9:1a:a2:ec:e2:31:02:d1:2b:7e:e0:a8:43:98:fd:44:
e7:3a:8f:93:4e:15:f8:a8:ec:82:6e:49:b4:ce:47:08:07:cd:
ea:55:51:97:7e:a0:41:50:e6:b0:84:61:7c:73:7d:ff:87:3f:
44:3b:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:10 2025 by rpki-client