Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File: jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier: sYz1XTJVN5tEkoKn7I+DiWD3PA8ODxSyrXcQPCFUS3k=
Subject key identifier: EE:6F:E2:E0:0D:71:33:91:BC:A3:EF:70:F8:9E:FE:10:09:CB:65:D7
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial: 019A4F998D94EFFF114CC0797A2432C2E611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number: 152C
Signing time: Tue 04 Nov 2025 16:00:54 +0000
Manifest this update: Tue 04 Nov 2025 16:00:54 +0000
Manifest next update: Wed 05 Nov 2025 16:00:54 +0000
Files and hashes: 1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: 2rQsoMrcqK/mqls4GXW4R/mllSSPV7Xn+MJjVVy+K6c=)
3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8d:94:ef:ff:11:4c:c0:79:7a:24:32:c2:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Validity
Not Before: Nov 4 16:00:54 2025 GMT
Not After : Nov 5 16:00:54 2025 GMT
Subject: CN=ee6fe2e00d713391bca3ef70f89efe1009cb65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:81:b8:d8:8f:6b:ae:ec:84:9d:ae:c9:d6:
8e:8f:f9:de:15:ba:2b:b8:29:fd:20:26:e1:63:af:
a8:dc:c8:67:cd:2e:cb:f0:7b:80:ba:c8:53:14:1f:
a2:0d:95:f5:50:7f:58:c4:af:22:a8:e6:7f:37:85:
f4:04:e0:1c:0f:1b:67:de:8f:5e:3f:f6:d4:b5:76:
07:f2:cd:ca:1d:ce:12:36:d9:6b:3b:ea:a4:2e:ac:
1b:cd:a7:85:ab:7d:ce:ad:60:f9:11:e1:a0:a1:e7:
d2:cf:87:91:c1:bc:68:c1:3e:cf:0e:0f:a9:76:61:
f2:dc:a0:72:7e:4f:af:16:5c:cb:3b:13:38:0d:ee:
15:54:c9:9f:82:ef:78:d0:65:c1:cc:e2:8a:06:c9:
d7:b0:a4:2d:05:20:92:29:bf:bb:15:42:32:1e:29:
72:69:c8:09:71:81:8e:38:36:e6:ca:20:3f:18:04:
96:41:e5:7c:30:0d:e6:a5:6b:f3:9c:21:db:dc:8d:
5b:f5:28:9d:05:e5:6f:ae:9d:e3:0a:1b:24:fb:3f:
f9:3a:3b:9e:78:77:bd:e3:0f:7e:fc:a4:85:c1:c4:
ca:ac:5b:86:03:9e:7b:74:ab:2d:6e:0d:00:f4:9c:
9a:ad:95:a3:b7:e7:d4:48:aa:c7:ce:7c:a2:b1:11:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:E2:E0:0D:71:33:91:BC:A3:EF:70:F8:9E:FE:10:09:CB:65:D7
X509v3 Authority Key Identifier:
keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:26:e7:dc:81:bc:a5:d9:d2:54:3f:be:f5:99:a1:06:e8:
8a:d2:b8:a4:23:e5:92:91:56:6a:b0:8c:d1:62:38:94:d9:2a:
79:73:6d:02:af:1c:6d:31:41:33:e7:b3:e9:d6:24:c4:fa:e8:
bc:43:87:7f:57:0b:92:0c:18:43:29:58:4c:d6:b4:3a:40:0e:
88:26:ee:a0:72:fb:df:a6:32:be:ba:e0:4b:b5:65:75:ad:73:
82:6a:00:b1:78:8f:e3:1b:08:8b:5a:e8:1a:15:fe:81:f9:89:
87:11:b0:1c:0e:8f:47:cf:89:00:30:ef:5a:c8:74:7f:a3:9d:
d2:77:96:0c:1d:9c:94:24:ca:3f:34:e6:6d:7e:1f:fa:47:96:
4b:b5:db:5d:b1:20:46:8c:07:f9:df:c3:7d:2c:65:a1:89:48:
35:6d:56:92:b8:e0:0a:d4:3d:81:3f:50:9a:3f:c3:b4:9d:19:
21:e8:43:b2:6b:3c:49:e1:c7:c8:e6:ea:65:75:63:82:5b:e9:
7e:18:ce:3e:57:60:ce:48:ac:0b:7c:93:4f:11:19:c8:2b:d4:
7a:df:b4:f5:e6:3f:63:32:e5:a3:57:32:02:6e:51:d6:23:b2:
61:3a:fc:20:1d:5c:96:70:94:e9:8d:26:39:fa:68:1c:6e:6f:
e2:e9:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:20 2025 by rpki-client