Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: jyffVRm3N9ElXTlQZTq6e1bjFKr+MITB6+7qy2bd5bo=
Subject key identifier: 11:48:10:E0:B3:67:45:3F:30:E6:DC:29:10:97:27:4C:79:76:64:F9
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 019A4F2B5E614CF61E2DEAF4593080CF7FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0D35
Signing time: Tue 04 Nov 2025 14:00:33 +0000
Manifest this update: Tue 04 Nov 2025 14:00:33 +0000
Manifest next update: Wed 05 Nov 2025 14:00:33 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: aHl9f5eIvagGpqkJhVyZK/7jQf3uNh0mnzagRPPEikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5e:61:4c:f6:1e:2d:ea:f4:59:30:80:cf:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Nov 4 14:00:33 2025 GMT
Not After : Nov 5 14:00:33 2025 GMT
Subject: CN=114810e0b367453f30e6dc291097274c797664f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:78:25:63:91:6d:54:88:60:75:e7:4a:47:
f8:d0:86:5e:7c:f8:dd:3b:50:f0:0a:34:75:5b:e9:
1d:ac:96:e2:50:c7:72:ff:5a:ab:d3:b2:b5:52:74:
8c:8f:66:3c:58:d0:bc:fd:ab:70:1b:3a:87:17:98:
42:4e:96:b0:52:f8:32:c5:d3:b4:21:3d:17:5f:3c:
38:89:da:8a:0c:bd:a7:9a:26:cc:5c:55:59:a4:d6:
8b:c2:18:e9:c8:2e:77:3e:ff:76:c9:66:d6:3f:95:
87:f8:be:97:25:f9:2b:c9:08:ca:9d:ed:1a:af:13:
25:d5:17:f3:39:0a:38:a0:47:9d:93:10:ed:e9:48:
b8:bd:a9:5d:ed:fa:2a:57:c8:17:b8:fc:54:20:f6:
a5:6b:54:8c:75:d4:95:4c:4c:73:a3:66:a1:ff:7b:
9d:10:d9:2c:93:10:8b:1e:d5:15:88:49:e7:82:2e:
3d:32:3f:9a:fa:aa:e6:fc:20:fa:bc:2c:71:8c:b5:
30:98:51:c1:12:91:f9:a8:17:f6:46:de:db:6c:14:
b5:b6:8f:41:d6:75:ca:47:e7:e1:24:a7:87:64:17:
98:de:ab:a4:54:7d:31:db:d8:24:09:81:8a:e2:92:
f1:fa:f9:09:ac:69:f0:59:3b:81:2d:36:9b:ba:a4:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:48:10:E0:B3:67:45:3F:30:E6:DC:29:10:97:27:4C:79:76:64:F9
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:db:8e:dc:b9:f8:21:5b:e2:35:91:76:63:1f:27:9b:5b:bf:
90:05:ae:40:0f:a2:dd:71:2c:e6:91:a0:67:21:e9:80:5a:01:
f7:d6:95:bd:d9:07:2f:4d:6e:fb:e7:05:c8:de:98:02:68:c6:
6e:5d:5e:2f:3a:16:b4:20:fe:91:5c:ec:70:3d:51:8f:8a:e0:
10:db:c1:2f:91:87:f2:50:ce:83:72:13:90:42:72:b8:b5:9d:
a1:91:05:f2:40:ca:d7:8f:13:ca:c1:70:f4:bf:56:a6:0d:b4:
c6:70:af:d7:2e:fe:b6:61:42:d1:07:3a:9d:17:4f:4e:14:c9:
b0:63:88:1c:8a:b9:ae:c5:55:9c:ce:7a:1a:29:bb:a6:03:0b:
06:e1:e6:24:db:2f:4b:d0:f6:72:ba:b0:a2:11:ee:92:b3:ad:
67:4d:e2:3f:e3:72:94:a7:d6:38:f7:5d:d8:08:83:4e:21:00:
1a:71:d6:e8:0f:e3:cb:a2:08:4a:57:08:08:6e:6c:8f:4c:e8:
69:0d:09:02:b4:f5:c3:1f:b4:20:5d:e8:05:22:2e:9b:f0:ec:
0d:41:8d:63:b4:3c:27:03:15:21:7f:57:24:8f:92:a0:26:be:
3d:22:37:e5:56:7e:19:ae:f4:b0:80:39:4d:c5:7f:55:2c:c3:
01:b3:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:17 2025 by rpki-client