Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: p80kW34XVXk9wjeDsuZ2NLMcvEfFsbTxqpOqzNZhlaE=
Subject key identifier: CA:07:1C:59:9A:6D:A5:AF:CD:E5:87:66:7B:F2:F0:85:4B:6F:57:C9
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 019A52D1A6218B098B4E451FEA03431D9957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:01:02 +0000
Manifest this update: Wed 05 Nov 2025 07:01:02 +0000
Manifest next update: Thu 06 Nov 2025 07:01:02 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: /0RTdTFW3ft/eVNMks7GF6AdET9O0D0PVrsK9uUABXQ=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a6:21:8b:09:8b:4e:45:1f:ea:03:43:1d:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Nov 5 07:01:02 2025 GMT
Not After : Nov 6 07:01:02 2025 GMT
Subject: CN=ca071c599a6da5afcde587667bf2f0854b6f57c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:48:d8:cd:0d:a4:5a:1b:bb:aa:6c:f9:73:
6a:d1:e1:37:b8:14:73:f8:04:34:c4:64:32:bc:2d:
05:58:a1:2c:bf:64:c2:b8:20:77:26:2c:cd:3a:e7:
6f:d5:f2:f5:9d:4b:fd:ba:b0:6f:5f:57:08:a5:af:
ca:c0:98:bb:b2:98:87:da:6b:0f:31:dc:a3:2a:a7:
e5:48:f1:19:75:1f:98:96:1c:5c:b4:25:c2:cf:0d:
15:c9:ed:52:d6:04:f1:31:6c:48:c8:26:44:69:c3:
b8:57:16:7e:54:96:62:8a:bb:68:7b:e2:8f:12:27:
ec:ad:a9:cf:b9:9f:0e:3d:43:95:ba:20:e4:45:75:
d6:1f:83:98:7f:cb:12:ec:f8:11:da:e7:19:7f:62:
e6:f9:42:01:6d:45:f9:8f:30:ef:60:52:e5:60:5c:
2c:78:e6:3d:41:64:bb:2b:93:4b:c3:a3:86:b5:38:
df:6c:26:e6:1e:79:fc:1f:e7:8d:34:c1:c5:72:f0:
95:0b:d0:a4:9a:53:ff:de:43:b1:c5:e2:de:8c:e7:
06:f1:c8:6f:47:d0:42:63:c9:00:69:34:19:da:03:
f6:a8:7f:bb:af:67:b0:56:48:11:bc:b1:b8:43:d7:
4d:c1:a3:4c:b5:dc:68:68:eb:e5:98:08:18:53:92:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:1C:59:9A:6D:A5:AF:CD:E5:87:66:7B:F2:F0:85:4B:6F:57:C9
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:a2:3b:c8:ea:c4:87:d1:8b:ae:b1:85:04:52:5b:e5:cb:
af:86:e4:a7:61:c7:ab:aa:12:40:a8:5f:bb:c7:aa:b1:a9:a3:
60:fc:97:50:07:34:aa:f1:94:5c:0c:59:f6:48:89:b4:bd:b0:
96:b1:41:9f:0b:79:83:07:e6:86:ec:7e:08:0c:d4:c5:e7:2a:
7b:a0:0a:25:ba:16:e4:0e:87:08:90:bf:5e:4c:52:24:1f:02:
5f:12:9a:10:f4:07:00:6c:64:37:30:15:6a:98:1a:b5:53:7c:
49:ef:43:54:b5:da:bd:d8:d5:a4:6c:87:ce:82:f1:9b:76:33:
99:c1:13:e1:d0:30:12:de:da:9e:0e:c0:4e:18:f7:75:b9:4e:
49:64:ef:23:f2:76:94:85:5d:83:f1:63:f0:3a:42:64:de:b8:
e7:b1:37:76:97:b5:b5:e3:e3:1c:e2:32:82:f3:45:06:53:95:
1a:6f:2f:70:c4:82:94:0a:9e:79:73:24:2b:d7:58:06:e0:64:
e6:a6:2a:15:22:7a:2f:8b:e5:58:3c:d3:08:06:2c:7e:e6:84:
09:36:20:87:9b:12:8c:1e:8a:75:ff:06:f4:cf:c7:ff:d9:e5:
bf:bb:c3:51:05:be:e3:c4:bb:b1:2b:b6:5b:0e:30:cf:bf:5d:
e7:66:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:57 2025 by rpki-client