Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier: bCyzTabtGin2Gm3LtxTkwZvEm1sfpxzl3HGzSLDKBhg=
Subject key identifier: D4:B0:78:A6:96:DE:04:36:EB:07:D3:94:EA:3B:E9:2D:C3:23:05:E6
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial: 019A4E19158C8DD5013A7CC153E38F71E03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=)
2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: 37FSNoVSqqCcErn+Hfx9ph5tUWgl/Ud2cjucKNn0Hvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:8c:8d:d5:01:3a:7c:c1:53:e3:8f:71:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=d4b078a696de0436eb07d394ea3be92dc32305e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:c9:d8:f5:63:d4:7b:35:8a:83:68:20:fa:
c4:08:da:53:9d:ed:32:58:23:2f:89:d7:50:fa:06:
50:78:66:40:10:99:da:e0:03:9b:fc:4f:eb:89:c5:
88:47:8b:74:94:3f:17:bf:1d:4f:5f:37:54:cd:67:
6f:75:60:62:b5:0d:46:2e:3a:04:18:a6:68:79:fb:
83:e0:95:3a:9b:13:7e:60:1c:11:5b:81:18:d6:70:
4b:05:57:a1:e8:f7:ea:3c:3c:5b:29:41:a3:72:17:
df:4d:72:2e:61:cf:95:c6:3e:64:3c:98:fd:12:c0:
80:1b:e3:e8:cc:f4:cc:7f:58:70:89:74:a2:9b:dd:
8b:ab:03:76:38:90:3c:49:77:f1:b5:25:51:51:9f:
86:ab:21:c5:37:e8:49:a0:2a:0c:0f:a8:4c:b4:03:
e1:b9:89:d3:78:20:70:a1:45:23:b8:1c:d7:86:66:
4c:a8:2d:6b:65:c4:c5:e6:78:bb:d8:0f:ed:41:28:
45:32:10:0e:1c:bd:b1:7a:f6:6d:1c:9c:b9:1a:9b:
93:20:2d:5f:90:f1:66:ef:55:56:a8:1e:b7:3f:70:
08:f3:8c:72:8f:df:c7:97:83:0d:97:94:4f:6f:bb:
dd:b5:51:cd:c8:d5:b3:fe:52:6b:f7:ff:f0:48:5f:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:78:A6:96:DE:04:36:EB:07:D3:94:EA:3B:E9:2D:C3:23:05:E6
X509v3 Authority Key Identifier:
keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:0b:5c:45:ce:dc:27:58:2f:27:d2:17:a7:ef:d0:1d:f3:
7e:88:11:58:a2:5e:24:d0:35:cd:07:da:1d:f9:ae:75:b4:d4:
b7:72:1f:ce:c4:f7:ea:b6:8f:18:bc:6d:26:17:70:32:d7:3f:
45:cb:ce:7c:f3:a1:63:d1:89:63:14:92:58:72:fa:e4:ac:e7:
c7:ed:fe:b1:f4:47:83:9f:ab:7a:7e:db:f0:2c:1f:8e:a7:84:
ad:7b:5c:d2:f8:97:41:d7:bb:f4:c5:bb:77:8a:a0:c5:3c:b5:
5d:f1:2c:be:c5:2f:63:8e:16:f0:c4:8f:fe:34:2e:6d:26:c3:
9f:4b:d9:50:61:06:95:76:13:27:96:40:48:b7:a0:5f:b5:63:
4f:c7:35:56:d1:86:09:6d:de:b3:83:da:ff:68:fd:40:7f:33:
bc:75:22:20:29:0e:f4:27:85:86:e0:1e:8d:93:83:ea:fd:a9:
75:b1:77:c2:c1:74:06:a1:f6:07:80:76:19:86:d7:53:51:d0:
10:bc:e0:52:fe:72:39:75:79:c6:1a:2e:7f:e3:03:fd:c6:95:
af:f1:84:ba:12:cb:96:60:e8:b2:eb:93:a9:dc:78:f4:27:12:
6d:e2:32:d3:77:40:f3:7c:72:13:62:ed:0f:c9:e3:de:74:3c:
73:5f:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client