Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: a2dBONfevmwaqgtapYwCsttw0Gw1oUsRd9GLgwQoZX0=
Subject key identifier: 68:E6:55:86:9B:90:B7:EC:B2:77:E5:09:A7:E5:F6:49:CE:33:6F:E2
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019A4E18AABEBB3B330999FF6972D09982B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 1045
Signing time: Tue 04 Nov 2025 09:00:30 +0000
Manifest this update: Tue 04 Nov 2025 09:00:30 +0000
Manifest next update: Wed 05 Nov 2025 09:00:30 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 5qvSPXZzvRCLucHovifHEQktRIMU3ncQhHRP1csGFW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:aa:be:bb:3b:33:09:99:ff:69:72:d0:99:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Nov 4 09:00:30 2025 GMT
Not After : Nov 5 09:00:30 2025 GMT
Subject: CN=68e655869b90b7ecb277e509a7e5f649ce336fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:14:21:c8:d4:a7:53:8a:2a:2d:57:ff:7f:
66:b0:ad:ac:68:fe:dc:53:07:ad:13:d0:f9:b9:7d:
9d:ae:89:41:11:c9:99:87:92:e3:53:66:67:46:b1:
16:55:51:8d:e0:3e:d1:92:05:94:b4:9c:8d:39:1d:
69:2b:9d:9c:28:7e:f2:42:67:73:1b:9d:bb:27:a1:
c6:02:85:4c:c6:af:5f:0f:66:11:e6:f4:77:73:fd:
29:4a:da:77:ee:5a:e5:2f:9b:a8:aa:45:33:0f:f4:
99:1d:2c:17:d3:e8:b6:5c:95:ba:59:65:de:0e:51:
7b:ae:66:cb:05:33:56:04:d3:28:0d:a3:b3:a9:c2:
c9:95:b3:3a:49:69:3b:f0:d9:24:30:c7:ab:73:d1:
4e:59:f5:c9:f1:02:08:59:cf:23:71:64:d4:6d:05:
33:a1:48:91:96:db:9a:9c:ed:12:6d:b4:9f:c8:3b:
25:98:8d:8b:fa:16:eb:6b:a1:8f:06:e7:ed:e8:30:
ab:fa:0c:ce:ad:ff:d6:1b:f5:31:db:ec:9c:53:7f:
35:4f:55:5e:f0:a5:23:64:c2:c9:7d:e6:c4:2b:73:
59:89:5e:76:ea:c5:02:8e:f9:63:c8:71:dc:d0:1e:
d2:80:5b:39:26:94:60:2a:89:96:43:ed:7a:95:88:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:55:86:9B:90:B7:EC:B2:77:E5:09:A7:E5:F6:49:CE:33:6F:E2
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:33:9a:16:1a:4e:c7:4c:d9:7c:69:e0:d9:27:dd:9d:37:e5:
90:be:55:8a:c7:af:5c:c4:49:5b:8a:21:4a:4c:cb:93:ce:60:
d0:79:00:45:b9:b8:51:4b:58:31:d9:19:5b:b1:55:6c:5b:1a:
05:42:58:ab:e7:4a:0c:e5:ce:79:da:bc:e3:bb:37:54:b6:80:
f8:5d:4e:c1:69:cb:e5:dd:01:a7:8c:1d:f5:90:b6:56:23:17:
d8:d5:ae:43:6d:7c:e7:45:63:c6:6b:a3:76:41:a1:d8:11:8d:
0a:d6:19:d1:8a:c0:c2:93:13:89:af:48:c0:aa:bc:6f:8e:bb:
88:a4:25:24:83:a3:cf:2b:0f:db:ab:40:ed:27:39:37:50:86:
e6:d4:a9:1f:d9:59:07:36:46:e2:a8:41:0d:20:19:74:a0:75:
d6:28:ca:2f:35:4b:78:4a:03:44:0c:4a:89:25:ee:bf:7a:79:
15:ad:63:6f:26:49:ae:2a:b3:04:82:0f:a7:d6:02:9c:d9:23:
4d:b9:27:7e:39:0a:c6:61:26:ff:3a:cb:b8:cb:a0:57:41:e0:
d6:ce:0f:8a:e8:42:62:61:8a:f9:e2:a2:07:ed:9e:ff:d6:22:
10:a3:d9:50:cf:54:50:0d:c6:88:25:53:f5:f4:39:b9:42:53:
ee:d5:b9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKq+uzszCZn/aXLQmYKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjUxMTA0MDkwMDMwWhcNMjUxMTA1MDkwMDMwWjAzMTEwLwYDVQQD
Eyg2OGU2NTU4NjliOTBiN2VjYjI3N2U1MDlhN2U1ZjY0OWNlMzM2ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pEUIcjUp1OKKi1X/39msK2saP7c
UwetE9D5uX2drolBEcmZh5LjU2ZnRrEWVVGN4D7RkgWUtJyNOR1pK52cKH7yQmdz
G527J6HGAoVMxq9fD2YR5vR3c/0pStp37lrlL5uoqkUzD/SZHSwX0+i2XJW6WWXe
DlF7rmbLBTNWBNMoDaOzqcLJlbM6SWk78NkkMMerc9FOWfXJ8QIIWc8jcWTUbQUz
oUiRltuanO0SbbSfyDslmI2L+hbra6GPBuft6DCr+gzOrf/WG/Ux2+ycU381T1Ve
8KUjZMLJfebEK3NZiV526sUCjvljyHHc0B7SgFs5JpRgKomWQ+16lYg6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjmVYabkLfssnflCafl9knOM2/iMB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjOaFhpO
x0zZfGng2SfdnTflkL5VisevXMRJW4ohSkzLk85g0HkARbm4UUtYMdkZW7FVbFsa
BUJYq+dKDOXOedq847s3VLaA+F1OwWnL5d0Bp4wd9ZC2ViMX2NWuQ21850Vjxmuj
dkGh2BGNCtYZ0YrAwpMTia9IwKq8b467iKQlJIOjzysP26tA7Sc5N1CG5tSpH9lZ
BzZG4qhBDSAZdKB11ijKLzVLeEoDRAxKiSXuv3p5Fa1jbyZJriqzBIIPp9YCnNkj
TbknfjkKxmEm/zrLuMugV0Hg1s4PiuhCYmGK+eKiB+2e/9YiEKPZUM9UUA3GiCVT
9fQ5uUJT7tW5bQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:01 2025 by rpki-client