Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File: Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier: 7+/2t6ct4piEDw1Fpl1NChUhZ72oVTHOtX76H5s4KXw=
Subject key identifier: D4:B8:00:BB:36:DE:BD:33:C5:1B:1A:77:AB:73:FB:22:B6:A1:37:20
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 019A530846A62865DCCEDDA9A86F63736BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 08:00:42 +0000
Manifest this update: Wed 05 Nov 2025 08:00:42 +0000
Manifest next update: Thu 06 Nov 2025 08:00:42 +0000
Files and hashes: 1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: QAYlGDv9FRog8Z6k0NGOTnba+ZFFEQbQiTeBGdP37Zg=)
3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:46:a6:28:65:dc:ce:dd:a9:a8:6f:63:73:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Nov 5 08:00:42 2025 GMT
Not After : Nov 6 08:00:42 2025 GMT
Subject: CN=d4b800bb36debd33c51b1a77ab73fb22b6a13720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:7d:e5:36:a8:33:cd:d1:c1:e6:33:d6:fa:
2d:15:83:36:3f:28:21:4b:c0:9f:f6:c5:58:43:85:
cc:38:b4:c6:5d:e6:3b:29:93:46:a8:73:df:2d:de:
15:94:44:39:36:be:ef:e7:d0:70:e6:60:23:51:f0:
60:d0:a1:09:1d:55:ae:b2:04:92:49:d6:0a:0f:4d:
41:d8:32:f7:54:f4:c1:05:ad:32:02:72:5e:b4:f0:
06:ef:7b:33:24:84:2e:19:2d:12:61:fb:80:dc:40:
87:5b:67:1e:67:47:62:12:72:ed:93:43:67:f1:2b:
6a:15:e7:15:89:a7:9b:6d:75:c2:af:b5:d9:bd:68:
ea:92:1b:74:a1:a3:18:a1:7b:ef:4e:db:a5:56:0e:
41:57:ab:9b:22:05:78:a2:a8:b4:b9:bb:bf:b4:b0:
9a:bc:a4:c4:05:58:63:e7:08:ac:c8:ee:91:e7:be:
25:76:be:73:36:f7:b2:96:66:78:4f:7f:d5:ff:87:
a6:b3:83:91:53:0b:5b:9c:92:76:1f:4e:0c:fb:be:
3b:18:a7:cb:58:41:53:0f:fe:ad:e9:8d:46:e6:09:
7a:8e:b9:7c:42:6f:9f:d1:2e:6d:8f:4b:83:8f:0c:
49:82:45:fd:ad:da:7e:9d:84:92:d8:5a:d7:92:4d:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:00:BB:36:DE:BD:33:C5:1B:1A:77:AB:73:FB:22:B6:A1:37:20
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:15:fa:a2:1b:97:16:34:ef:ea:95:be:53:96:df:6a:e5:ee:
e4:a1:0c:6b:a2:7f:b2:5e:69:0a:29:75:09:35:bd:c6:75:18:
fb:02:b8:37:53:30:7e:d2:dc:14:b2:d7:b4:0a:6b:ec:58:0b:
4f:f7:db:74:23:63:bb:fe:a2:e6:4d:bb:8a:6b:73:f9:2e:3f:
23:a9:0d:89:ec:f0:1b:fa:df:3e:8b:1a:52:68:72:85:91:60:
c9:48:27:d6:42:e5:8f:98:c7:43:dc:bb:67:a5:98:56:dc:26:
0c:c3:b2:3a:b2:be:c6:13:07:87:a0:6d:a7:14:ab:02:76:bf:
2a:40:37:e0:af:38:68:65:ce:80:2b:17:ca:f7:3f:0f:cf:0b:
37:21:31:4e:eb:25:27:cf:d0:19:44:45:a9:47:ee:45:b3:2f:
11:f8:4c:8b:06:20:6b:ea:03:34:d8:a1:59:de:bf:ff:0d:b0:
d0:a2:81:02:42:d8:46:aa:e3:5b:ff:06:2b:ad:82:5b:2a:a3:
0b:8e:15:2b:54:28:87:40:25:a9:0e:b6:5b:52:bd:6b:e5:7d:
0a:7c:7e:93:69:82:83:d0:64:71:4d:7b:18:0b:9c:c4:aa:11:
20:62:da:4a:fb:87:44:bd:26:b6:50:d6:cf:ae:92:79:1d:48:
90:1b:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:37 2025 by rpki-client