Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: 5LwnhE/8MEQD8kZjr6BNtOTCbIsSW9an/1glMaRaocM=
Subject key identifier: F5:7D:1D:D9:3F:D3:2D:FB:03:FE:22:A3:7E:FC:7E:4B:AC:42:54:21
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019A4F99650E33ABC25A8BE124C94FFA3833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: Tg/Iri6p62O0JS+ET8CdNJACOVZhmJJ44QNkWX5iVWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:65:0e:33:ab:c2:5a:8b:e1:24:c9:4f:fa:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=f57d1dd93fd32dfb03fe22a37efc7e4bac425421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:df:f4:d1:a7:f3:7f:8b:28:96:5b:04:39:
bb:17:aa:d1:9d:b8:a0:22:23:38:33:10:cb:37:86:
bb:93:5e:84:fd:66:48:7a:04:7a:52:7e:3f:f2:ed:
8c:c1:89:f3:b7:0f:7f:45:b9:ae:af:47:1c:f0:ef:
b0:85:1a:0c:56:31:8a:78:08:9d:60:11:d0:00:48:
72:3f:d7:6d:60:f9:28:09:5c:23:e4:21:fd:bb:61:
20:27:4d:87:72:e9:a6:e2:ba:7b:d1:6c:d9:7c:b9:
cf:6d:3f:af:6a:fe:55:bc:4e:46:43:b3:10:95:a6:
c3:c0:67:49:06:92:70:d9:e0:d1:4c:6e:98:07:f6:
5c:17:4c:d9:fe:3a:ed:0c:10:58:be:24:3c:45:44:
1b:78:c4:fa:42:07:c7:81:02:83:8f:59:48:f0:25:
33:cd:b4:03:a2:fe:b9:18:d0:12:69:f0:9a:ea:7d:
0c:f8:0d:66:e2:61:b7:01:bb:9c:b8:4d:ee:9c:87:
cb:fc:34:4d:70:69:6e:4a:dc:69:a9:a9:f4:c1:d3:
cf:5f:fc:cc:39:ef:e1:9d:b2:23:03:af:13:27:89:
b4:2d:69:1a:cb:a8:63:0b:90:dd:6d:ac:71:ce:b9:
65:cc:f1:22:e4:8b:47:91:63:d3:88:34:cb:e8:92:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:1D:D9:3F:D3:2D:FB:03:FE:22:A3:7E:FC:7E:4B:AC:42:54:21
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c2:7a:b4:3f:4b:8e:e7:6b:c0:f8:b9:32:4a:60:4e:5f:fa:
e3:fb:21:6c:55:bd:ef:06:e0:0e:f2:66:2c:53:f4:30:a6:80:
28:ff:50:4c:3a:84:ac:0e:a4:18:6d:9d:ea:e0:c5:ef:6f:e3:
a8:fc:30:87:45:f6:cb:35:39:75:a9:c3:81:64:66:13:dc:0f:
b8:9d:e0:2d:61:6c:7e:0d:bf:99:01:9f:2d:eb:b6:06:e4:64:
d1:b8:f3:e0:7a:ef:c2:0f:74:3b:8a:1a:8f:95:08:0c:21:20:
d8:b4:ab:4c:93:b6:67:3f:98:40:15:c8:f9:0d:f5:7b:31:be:
bb:a7:2e:95:a0:83:4c:b4:3b:f4:a3:6e:0c:af:43:df:83:69:
2c:ed:00:0f:11:12:e2:7f:1b:3e:71:17:31:60:e8:8a:30:79:
74:83:70:36:52:49:be:22:cb:de:e8:50:f8:53:81:37:75:71:
68:a7:c3:29:6b:a7:ab:2d:a7:ca:f6:54:a3:be:bc:50:b0:a6:
d0:3e:c7:c9:f1:cb:3d:01:e6:f3:a8:a8:f8:d7:4f:72:86:7c:
f1:dd:b4:35:ce:68:90:26:7b:2c:35:08:10:ff:c5:67:5c:aa:
2c:a1:42:84:a2:c7:ea:d1:ff:79:d3:99:e5:9f:f7:ab:1e:5e:
18:c1:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:20 2025 by rpki-client