Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: Emg5cWpGzcJzEZmRS/3vuqO5AOlxvO3mSF7b0HTLhLI=
Subject key identifier: 06:ED:57:35:EF:77:37:40:77:D9:81:0A:6E:D9:95:16:68:6C:AA:41
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 019A4C9859FF11AEE09C089B3F5746D851B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 08A7
Signing time: Tue 04 Nov 2025 02:00:44 +0000
Manifest this update: Tue 04 Nov 2025 02:00:44 +0000
Manifest next update: Wed 05 Nov 2025 02:00:44 +0000
Files and hashes: 1: N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa (hash: Vxcy3FAQ9wvKVutRhz6cjFdOl9fvO+V6qA+CiMGZesU=)
2: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: sYW9KDZuc4LlNbWme/CZU/tHnmSQFZ4U5ZyhOJRkeMA=)
3: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:59:ff:11:ae:e0:9c:08:9b:3f:57:46:d8:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Nov 4 02:00:44 2025 GMT
Not After : Nov 5 02:00:44 2025 GMT
Subject: CN=06ed5735ef77374077d9810a6ed99516686caa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:c8:2a:0d:8d:e8:03:2c:fb:12:1c:8a:2b:
54:f3:e2:9d:9a:a0:ca:67:e0:c5:6d:35:67:48:83:
a8:ff:b2:02:05:12:dd:38:9c:dc:1d:1c:10:e4:2c:
60:00:af:4e:8a:07:ed:31:08:52:e1:3f:48:cf:03:
98:31:7f:d4:a6:fe:47:86:fb:ca:c1:91:90:de:20:
d8:4a:01:e4:b3:3c:57:84:4d:93:2d:45:6b:ae:8f:
cb:dd:a8:3e:b3:ba:75:24:83:ed:33:cf:fb:e1:e1:
49:0c:89:26:01:72:d3:a7:36:2d:be:4c:2a:b7:fe:
fa:b5:c4:cc:66:ba:0d:19:92:1f:3c:7b:27:eb:25:
ed:31:bf:c3:a2:ac:60:3e:7d:92:48:70:f0:b7:6c:
c8:4a:eb:7b:01:aa:29:a0:68:a1:b0:62:10:af:e9:
5c:3c:a1:09:cd:1b:b0:7b:8a:f6:4e:14:1e:4c:24:
69:df:57:6f:b0:e0:93:24:3c:6f:0a:d6:76:37:8d:
ae:6f:50:9f:0a:a7:74:b5:5a:7d:bb:43:2b:b2:f6:
97:09:7e:47:f4:1e:40:c2:df:30:3f:b7:d4:b1:3d:
3b:7f:40:44:71:e1:4f:8b:15:7d:8d:24:6d:94:93:
f1:ab:82:a0:7c:cc:1e:41:23:52:26:d9:54:3c:3d:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:ED:57:35:EF:77:37:40:77:D9:81:0A:6E:D9:95:16:68:6C:AA:41
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:b8:b8:f4:d2:8c:0e:1b:35:12:11:cb:a1:92:af:b7:dd:
39:a0:a1:e4:48:57:69:32:a5:ab:66:17:41:a8:0e:8c:b4:06:
2d:e5:ee:05:fd:1c:31:c8:f0:91:ce:21:f5:bb:b7:21:cf:e2:
9e:53:62:1f:64:09:19:b0:98:98:72:9a:5e:d4:62:88:76:75:
96:f1:22:07:41:06:a3:cb:cd:f2:8c:bc:6c:78:dd:14:c2:1a:
d3:70:0d:17:a4:7e:54:35:1b:6e:14:d5:be:04:e5:cc:c2:71:
e9:36:88:a7:e1:79:a1:60:34:3d:73:29:aa:02:ba:c1:3d:1e:
ff:67:d9:0e:0d:3e:dc:04:5e:15:5d:be:9e:a3:3a:4a:67:85:
d3:f6:16:54:d0:55:aa:f0:aa:ac:cf:de:47:fb:89:22:72:a2:
a2:e8:1b:76:bb:31:69:a3:3c:4f:cd:bd:50:bf:6e:d3:1e:a3:
f8:b0:e1:b5:ea:37:f1:3c:25:33:d1:5f:d1:05:fc:51:09:c5:
7d:7f:d3:73:4b:2c:0a:e1:c5:5a:89:23:9f:d6:71:08:bb:5b:
d9:aa:2b:f4:be:f6:14:e6:27:ee:5d:3b:16:e8:66:e1:28:32:
08:0d:ce:e3:08:01:7f:37:13:75:d7:b8:cc:f9:b3:7d:c9:5a:
ce:65:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:30 2025 by rpki-client