Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: vAQfUByj/Cnl8Vuei+v4wMMrBp74tWmZhu1CV5T+KMk=
Subject key identifier: 87:73:47:0A:26:CD:7F:A2:FA:6F:6F:D9:D7:D6:F7:48:00:29:78:C6
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 019A4D3D411571155D2C940CA97BA948CECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: F4uvITD9rwGA5HiT0Q3kgfwX0N+4oVSYFwbgrdixJSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:41:15:71:15:5d:2c:94:0c:a9:7b:a9:48:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=8773470a26cd7fa2fa6f6fd9d7d6f748002978c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:01:fe:30:0c:7c:63:21:9f:a3:ef:a8:22:
d4:36:6a:5a:e2:68:0e:a8:c5:4f:4f:45:97:a3:b9:
d0:2f:75:ae:b6:f6:5b:fa:1b:b3:e1:ff:1e:23:e0:
76:96:96:cc:fa:62:16:44:25:44:da:9a:8c:b1:bd:
00:8e:25:51:5d:32:4d:1d:39:6b:2f:af:d7:9e:5d:
f4:e1:97:df:d3:81:d3:59:01:48:61:27:73:d1:36:
02:0d:63:cc:18:08:8f:24:71:35:4b:73:5b:ea:c4:
2d:a0:b9:98:cd:e7:23:88:07:4d:7c:cf:2e:5e:f5:
70:03:e5:51:6f:9d:4d:dc:ad:80:2e:59:61:8d:54:
b2:a4:fa:83:25:b4:14:5e:22:0e:48:4e:62:d4:3b:
b6:44:45:5d:c1:4f:08:9e:a1:95:87:af:f6:fa:49:
e9:4b:48:ca:3e:94:f7:55:b3:0d:cb:5f:37:73:f7:
3a:37:ff:ed:f4:a7:26:e3:83:13:d1:de:f1:35:57:
40:af:87:33:18:09:55:24:5c:e3:70:16:04:6e:35:
c0:3c:64:db:f6:85:21:76:b2:3d:d0:cb:65:39:94:
2b:37:98:ae:9c:04:03:2f:18:9d:51:69:ce:97:09:
6a:0b:84:78:17:bb:2b:ea:8e:1a:3f:fc:3d:3c:ad:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:47:0A:26:CD:7F:A2:FA:6F:6F:D9:D7:D6:F7:48:00:29:78:C6
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0a:6a:f5:c4:ad:60:67:77:f2:e0:ce:b0:6e:c4:f0:5e:71:
db:79:b3:fb:8b:6d:7a:8f:c9:89:e4:bc:8d:df:f2:48:bb:55:
6b:7f:c1:88:7d:ce:20:9c:ff:76:8a:21:2a:91:e2:44:87:c0:
d8:ff:ad:e5:13:65:68:d7:8d:b0:9d:4b:7c:d9:2d:2a:75:eb:
2f:02:ad:4c:08:c4:17:4d:f8:e5:91:f2:83:0a:38:60:c2:49:
6b:80:23:28:ed:85:69:a8:13:e8:d6:01:fc:c3:72:23:90:0f:
9c:99:7e:6f:55:53:2e:13:7e:bf:68:45:13:c7:d3:f2:de:0d:
b4:82:d5:3e:dc:25:08:f1:e4:83:bf:0c:1a:82:03:6b:21:9f:
6e:16:7e:79:2d:30:e4:44:36:0d:dd:9b:25:53:4d:f4:0e:4c:
00:f0:b1:b5:c9:3c:c7:3e:1e:bb:ae:fb:f8:3f:7c:b4:24:94:
aa:81:1c:8b:99:56:b2:a9:bb:97:d5:c2:e1:d1:46:ab:27:91:
1a:d9:ba:0e:98:01:1e:b5:79:b9:87:5a:04:c8:c4:d3:61:c8:
59:37:d6:e3:fc:36:a8:a9:79:b9:b8:97:97:c6:ee:dc:2b:06:
a9:e9:17:70:e5:50:1f:b8:0b:ee:fd:90:5c:30:ca:f1:37:8c:
99:6b:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:46 2025 by rpki-client