Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: CIs5uyS+QTraQ+oPXQm46O+OKZDSqhDJW1uJz7Fdb1c=
Subject key identifier: 80:98:A0:78:5D:48:8F:94:CE:74:90:30:42:EE:48:AD:96:7F:13:11
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019A4FD09A019F044153347AA5D01BC652B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0DCC
Signing time: Tue 04 Nov 2025 17:01:02 +0000
Manifest this update: Tue 04 Nov 2025 17:01:02 +0000
Manifest next update: Wed 05 Nov 2025 17:01:02 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: 2sfTCS7XoXH4i+78p6h1HK87eHlTnS7R3dB3j5SXwK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9a:01:9f:04:41:53:34:7a:a5:d0:1b:c6:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Nov 4 17:01:02 2025 GMT
Not After : Nov 5 17:01:02 2025 GMT
Subject: CN=8098a0785d488f94ce74903042ee48ad967f1311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:f5:de:a0:54:77:2f:75:47:74:d9:1d:39:
e0:b5:9e:a1:a6:b1:72:b5:23:52:e1:d7:ca:ea:64:
b5:79:be:0b:fd:38:3d:97:64:2f:c5:a2:58:60:93:
63:70:ad:a8:86:6a:48:8b:a6:2d:a6:06:2b:12:f0:
ed:c0:fd:b3:f4:1c:ea:a6:31:4c:4a:a9:08:24:c2:
e3:f9:24:03:5a:aa:c5:1d:a7:a3:00:4e:d8:c5:07:
da:a1:7c:e6:f3:9f:bd:31:83:87:6a:2f:f0:fd:ec:
28:e3:58:4f:21:18:e1:57:0a:a8:85:84:f8:c0:45:
3d:41:82:a9:05:96:da:4f:0a:1c:d9:0b:9c:8b:4e:
bf:f1:e8:03:45:5f:2f:7c:76:fc:df:c2:c7:18:c8:
0a:1d:2e:a4:1c:ff:22:47:64:78:22:f9:38:c7:48:
24:eb:89:2e:e0:db:ef:e6:e2:29:1f:b0:34:2e:09:
f1:f8:ae:f2:fd:a3:43:91:10:ce:3e:4b:da:04:c4:
d5:4d:47:dd:07:11:71:67:b4:cf:5f:91:fd:2d:02:
f0:63:00:10:b1:7d:ef:8c:d5:99:e4:2c:66:c5:ce:
c1:36:7f:32:af:cc:05:85:c4:7b:d9:ae:75:08:bc:
95:46:ff:be:05:c0:5c:c9:a0:2d:35:e1:34:51:6f:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:A0:78:5D:48:8F:94:CE:74:90:30:42:EE:48:AD:96:7F:13:11
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a1:c4:b5:17:29:ff:cb:c4:2c:9f:33:54:d2:ab:cc:ba:5d:
36:b8:64:26:8d:dc:23:2d:c5:ca:2c:c4:06:20:35:78:f3:05:
f8:51:d9:55:16:cf:e6:78:05:c6:82:b6:1e:eb:2e:b7:32:ce:
18:f5:9b:e5:3e:ff:3c:5a:87:77:0a:8a:c6:18:b0:12:20:ab:
03:aa:27:dc:70:b8:2a:f1:75:9f:78:d3:fb:b5:6c:f5:8e:a0:
06:11:05:92:4f:3d:fe:29:b3:aa:0a:92:71:64:1f:31:7a:89:
93:db:35:88:b8:ab:57:fd:81:04:2a:22:5e:24:b0:8d:80:97:
e8:57:69:2a:c9:00:2a:46:ab:60:fc:5a:9d:a8:f1:35:dc:db:
7b:39:d6:73:78:63:1c:fa:be:1e:aa:c3:1a:d4:b0:20:36:74:
70:34:db:12:d5:b6:cf:0c:1e:6c:bb:a3:d6:a4:07:06:e9:e3:
56:f3:99:68:c8:e8:9b:b7:25:b7:1c:83:cd:3a:80:a8:6a:d2:
fa:62:11:2b:f9:f4:92:7b:38:68:89:5e:1c:48:92:d8:e0:c1:
f1:48:d3:67:f6:92:26:6d:30:3f:ab:d8:ea:63:7c:51:fa:c3:
7c:10:91:7d:64:3a:2d:13:e2:25:24:ce:dd:7d:da:a8:65:bb:
01:d7:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:02:39 2025 by rpki-client