Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json)
Hash identifier: 9Fbl+J8YcwZXTzVuw9M3J1+HKJUY2Usr3yxVf3Srfeo=
Subject key identifier: 12:F2:83:32:EB:13:20:40:27:84:11:95:E6:CB:B1:1B:F8:C7:B5:18
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 019A53084AF39BB00D9359B7B705775E1999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
Manifest number: 4F
Signing time: Wed 05 Nov 2025 08:00:43 +0000
Manifest this update: Wed 05 Nov 2025 08:00:43 +0000
Manifest next update: Thu 06 Nov 2025 08:00:43 +0000
Files and hashes: 1: 9lTlIJVzjlfPnvZCoUdbSEtQwhw.roa (hash: 7dGAL4VELHTj+w0KDl5p2Kj2u6qzyQX4PVV9HVfH5AM=)
2: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: 1sxZuRtvP6WMyzf9jkxJYweKPtTz6nNkp2qZiax6K3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:4a:f3:9b:b0:0d:93:59:b7:b7:05:77:5e:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Nov 5 08:00:43 2025 GMT
Not After : Nov 6 08:00:43 2025 GMT
Subject: CN=12f28332eb13204027841195e6cbb11bf8c7b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:20:ee:38:df:7d:86:ed:d0:21:50:36:50:
31:9b:23:9a:c2:c6:9a:c4:3d:47:38:34:f4:53:01:
5b:35:68:14:96:88:6f:b7:5d:b4:4c:f2:65:b8:3c:
42:5a:2c:df:37:c7:1e:96:b8:84:6a:78:8a:2b:d7:
72:cf:4f:65:77:c2:51:31:2c:9d:7e:cf:4e:af:02:
a5:de:3b:a4:e1:7b:3e:86:94:3f:51:8e:63:1f:77:
3f:9b:55:09:b7:3d:13:8c:65:9e:25:59:32:5d:0e:
ef:e2:d4:fa:8e:a4:b8:25:68:86:7a:34:db:90:e9:
d4:86:87:f1:fc:17:96:b4:44:0b:fd:c6:3e:09:88:
ae:f2:0e:c8:55:36:0b:b0:48:23:ba:49:dc:c4:a6:
1f:8b:cc:51:46:eb:24:48:a3:4f:e1:ba:d1:c1:45:
2f:60:6f:87:55:87:14:cc:94:99:50:b6:4b:71:d7:
d7:6c:2f:65:c8:ec:23:6c:d5:62:d3:92:f6:f9:23:
67:bf:3a:55:1b:a6:eb:c6:24:77:e4:b0:cb:2e:a6:
a9:9c:3a:c0:de:7c:a5:df:18:c2:e3:74:7c:4c:e5:
a1:8e:90:2f:69:e6:07:79:22:0a:05:8a:8c:82:d0:
12:e7:30:c3:ec:ee:c1:50:93:73:98:39:91:34:75:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:83:32:EB:13:20:40:27:84:11:95:E6:CB:B1:1B:F8:C7:B5:18
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:b5:05:21:d1:3b:57:97:ec:5f:d6:b1:1f:5a:c7:f0:d1:
5e:9e:01:17:e0:8e:2a:8f:fb:2d:1c:de:60:01:56:cd:00:9f:
a3:3a:0e:7e:b4:5e:52:7d:d8:7f:4d:32:19:f9:3d:e6:29:b2:
fa:11:c6:f3:b3:f1:21:85:25:d7:8b:77:11:6d:a2:66:5c:75:
f3:97:f1:4a:55:cd:7b:db:c8:bb:1f:8f:6b:e1:0c:35:05:6b:
a3:89:b6:8f:cb:a5:f9:c3:da:a0:e4:32:7d:40:5d:58:fe:a7:
d6:f5:a1:ba:0a:23:9b:2a:be:0e:3b:b6:d5:dc:af:fa:ab:4c:
6d:32:b5:2b:72:c2:30:f0:64:1b:6d:29:34:5e:ed:3f:a5:a0:
23:aa:4d:8f:6e:f3:ef:cf:c6:46:c4:79:2d:c7:d9:cb:6f:d7:
51:5f:13:92:d6:e0:58:d1:85:52:c6:22:83:0c:d5:33:40:0d:
ea:39:99:ac:f7:34:7b:4c:a5:a2:8e:07:73:47:2a:3e:ec:d5:
85:74:f3:cb:69:c7:9d:bc:57:44:75:c5:18:ac:6a:53:9c:1f:
01:c6:be:fc:0f:bb:91:f3:e6:c7:c4:7b:f9:c5:68:b2:5d:11:
87:d2:11:eb:f7:0f:fc:7a:42:90:57:97:50:70:91:05:1a:53:
5c:8b:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:02:35 2025 by rpki-client