Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: yRD4LZah01xZAAvh+DXUYf+0Qx3DWNjEYTOszNA+iqk=
Subject key identifier: 87:D1:8B:EF:C9:B0:8F:D7:BD:A1:C2:43:A6:5E:C3:46:ED:FB:F5:7E
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019A4D0769338F1F5CE325AD10FAE4A66AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1724
Signing time: Tue 04 Nov 2025 04:02:02 +0000
Manifest this update: Tue 04 Nov 2025 04:02:02 +0000
Manifest next update: Wed 05 Nov 2025 04:02:02 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: yd8i4KZtzB6LlTB7F4d6EJHmMuOzepRzlrtyyHSF0sk=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:69:33:8f:1f:5c:e3:25:ad:10:fa:e4:a6:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 4 04:02:02 2025 GMT
Not After : Nov 5 04:02:02 2025 GMT
Subject: CN=87d18befc9b08fd7bda1c243a65ec346edfbf57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:f6:c1:8f:b6:a6:17:74:51:4d:d3:e1:7d:
4a:02:e8:a7:ba:14:a5:b9:39:7e:48:e2:d0:02:d2:
f9:ae:f4:f2:24:9e:f1:39:21:fc:93:96:72:d3:5a:
3b:82:3d:d1:b4:ae:d7:fd:55:46:f9:80:ac:3c:64:
88:d7:2e:ed:b7:ed:56:dc:47:46:0f:26:4a:86:f7:
9b:dc:a4:a2:45:d0:7f:47:2b:25:e8:2c:b3:9f:07:
3e:96:a4:4b:91:d9:ab:93:b0:e3:cd:d2:c3:df:ea:
ea:d7:b4:82:eb:13:09:3f:da:27:82:d4:53:da:7e:
51:6d:06:8d:75:a4:a8:31:ec:ce:0f:c5:6f:90:46:
bb:29:04:02:f3:c3:e6:e1:b2:0a:c1:51:5f:2b:70:
d4:62:01:f4:db:6c:c4:14:02:72:9e:7b:0a:b6:1b:
8e:0d:18:1b:9b:b6:1e:40:c5:ce:37:a2:8a:0e:d8:
49:ed:59:13:98:e3:b4:ff:42:28:c4:77:ab:57:f7:
db:b7:57:37:23:81:31:58:13:84:0c:6d:a2:d4:bb:
f4:45:33:99:c8:a6:2f:51:f6:8d:21:69:82:0e:d3:
04:16:70:4d:18:85:d0:38:36:f0:e4:b2:a5:33:21:
5e:41:34:a2:d7:5f:de:98:a1:76:67:9c:f8:7b:6c:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:8B:EF:C9:B0:8F:D7:BD:A1:C2:43:A6:5E:C3:46:ED:FB:F5:7E
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:a6:4e:22:6e:da:0f:7a:ec:55:6a:48:f9:38:e2:ec:eb:
21:36:69:83:1e:7b:01:41:85:36:44:ad:2c:9b:e1:f0:53:d6:
9e:c2:ba:5e:b1:80:e0:4a:b6:d9:76:fb:39:73:9c:cf:cb:db:
a2:93:2c:c5:81:e7:92:1b:71:73:16:0f:ee:53:70:24:55:9c:
e8:01:a1:02:ec:08:fb:c1:ba:85:b2:ef:5c:ff:a5:00:ff:93:
aa:78:a9:2a:cd:e3:56:d5:8f:8f:ef:81:6a:99:36:65:24:d7:
dd:86:6a:9d:41:17:18:65:63:40:7a:c3:24:82:0e:04:80:72:
a1:00:53:cd:4e:5e:ea:10:1e:51:16:e2:7b:62:fa:04:7e:92:
e8:c9:56:99:5e:64:a6:b2:c2:99:45:c3:38:2f:8c:f8:bc:bd:
97:16:38:f5:af:de:81:62:05:69:48:ac:3d:8b:7d:cb:55:45:
c2:3a:fb:08:eb:7c:c9:46:04:d5:6b:20:5c:56:c0:05:91:ae:
76:ec:41:41:a2:96:b7:83:d3:18:06:a5:90:20:f1:49:f6:c0:
94:fb:2c:65:ba:55:1e:b2:7b:45:42:9f:ad:80:7c:d2:0d:dd:
2d:b8:12:87:d9:1d:dc:84:89:84:35:13:5e:92:9c:7e:b8:30:
e5:20:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:17 2025 by rpki-client