Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: yg29IikAXwqjLq0pVci2SdF3WbCsVezXLABAUOKw39k=
Subject key identifier: 7E:10:46:A8:29:31:C9:03:A9:1A:7B:19:1F:AE:8A:4D:8E:B3:B0:09
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019A4D3D29E4486A9DC32A50171206336B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0C09
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: Gtdd/kY2gTF5M6esX+6qdGKL1cwoPmkTldeaGLPu1Cg=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:29:e4:48:6a:9d:c3:2a:50:17:12:06:33:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=7e1046a82931c903a91a7b191fae8a4d8eb3b009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:67:d6:15:4e:8a:86:91:9c:10:65:91:79:
0d:31:c1:5a:56:d9:dd:8d:7f:66:24:c2:ad:3b:9a:
66:6d:8b:88:aa:54:8d:8b:1f:92:99:81:0c:38:a8:
ff:54:ff:7e:78:d8:ef:8d:f4:07:5b:3d:5c:fe:2e:
18:c6:26:8b:59:5e:88:ea:5c:7f:2f:d4:3c:52:08:
36:b3:3f:d8:22:d3:88:8f:b1:4d:34:ee:5e:42:57:
e1:b9:d7:a3:b6:0d:79:ed:ef:1b:e2:da:fd:05:e2:
73:62:c5:24:10:56:a0:93:38:c7:4a:40:de:03:3a:
6f:e5:33:f9:9d:c7:c8:ba:16:3e:65:43:61:95:ed:
da:8a:4a:e7:8a:0c:67:15:2c:c8:05:a6:5c:4b:8b:
b0:72:5f:10:8b:14:b3:49:b4:2c:33:c2:f4:88:96:
0d:bf:2b:b6:9b:47:fc:a1:c9:52:57:aa:1f:7f:30:
2b:a4:b7:49:b3:8f:f3:01:e2:cb:3d:33:7f:91:04:
15:bb:1f:de:7c:b5:42:48:f1:ac:3d:5a:cc:38:99:
34:f0:da:df:24:70:9a:84:d5:f6:49:69:97:3d:c4:
75:f3:a7:b1:a7:a5:bf:ba:46:b7:98:8e:3c:9c:2f:
4e:3f:2a:de:28:9c:39:c8:52:38:b7:76:9e:3e:b0:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:46:A8:29:31:C9:03:A9:1A:7B:19:1F:AE:8A:4D:8E:B3:B0:09
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:04:69:50:1b:60:91:61:84:a3:06:fa:12:25:48:82:71:c2:
65:2a:3f:fb:36:ca:9c:fa:66:bb:2c:f4:a4:f7:17:74:18:76:
6f:4d:2a:35:81:f5:63:9a:37:74:fd:ff:ae:77:75:bc:e9:db:
88:9b:1c:2b:fc:9c:4e:fd:15:2d:d9:08:ff:4a:94:3d:03:bb:
dd:70:22:cb:7d:b3:9f:8d:08:d7:74:b4:ec:18:60:48:16:02:
15:cc:f8:49:4a:92:56:7d:c1:9a:c0:4c:e6:c4:7a:bc:74:9a:
46:72:6b:01:5a:69:06:a6:34:29:74:d3:e3:e3:59:4e:92:c5:
96:24:8f:33:5f:65:26:8c:fe:04:0f:24:03:3f:8f:2b:2b:b8:
99:f9:94:be:86:47:ee:6a:a0:98:91:21:57:1f:bd:52:0b:9f:
ae:bb:49:79:c4:67:8d:3a:0f:b6:d9:ba:f7:a5:71:cc:42:51:
41:78:b6:e6:31:c0:e7:aa:2c:34:4d:5a:64:3d:ce:e1:80:18:
a0:56:0b:99:fa:fc:6a:aa:df:c7:0e:cb:7f:c4:8a:a5:94:6f:
6d:4b:aa:1c:ae:bd:e0:bd:79:fa:91:1f:01:fc:be:c4:74:ba:
aa:c0:ec:ec:c9:31:26:19:94:2d:7c:dd:9c:3e:87:df:57:9d:
ec:3e:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:38 2025 by rpki-client