Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: vqGMpedgvZyGEb5dJmzNO95yrbiWK7A2n3dyWe8dsbk=
Subject key identifier: 8E:1D:A2:9B:D8:41:91:08:0B:E8:9D:30:54:8C:47:EA:15:E1:D4:A8
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019A4F2B64FDC2B5F199A42330D68227571A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 074E
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: OlsYSkFrA4fuGIYVR1B7F0SEF+IUFcA90IzCUJXXU/I=)
3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:64:fd:c2:b5:f1:99:a4:23:30:d6:82:27:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=8e1da29bd84191080be89d30548c47ea15e1d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:e4:b5:3e:bd:ba:c2:5b:eb:37:b9:08:5f:
ad:5b:28:6e:06:8f:8e:73:61:91:a7:16:49:21:9f:
58:d0:a3:d5:de:49:08:6a:2c:21:fc:8e:54:28:90:
81:f8:89:06:ff:6a:b1:e7:ca:5f:d4:b0:9f:1d:0d:
71:21:22:7e:d8:22:e6:59:55:90:be:83:bc:91:26:
ac:62:18:f1:c1:e9:44:e2:8c:f5:47:41:a2:cd:52:
79:61:f1:19:f7:fa:b8:ec:51:c3:67:ce:9a:c3:69:
af:fc:4c:db:70:02:b9:ac:63:01:ca:1c:32:d8:42:
ee:9e:78:c0:d7:bc:e5:0c:aa:ec:b9:2c:60:84:44:
e5:25:74:35:cc:bf:58:33:6c:8e:54:d7:7f:14:2a:
3b:72:bb:a7:7f:85:3a:3b:4f:e6:11:d3:2c:e3:09:
92:ed:5e:51:c4:9b:26:6e:3e:94:d1:ce:63:50:c1:
25:d9:e1:18:a2:ef:71:ed:83:12:aa:14:71:be:dc:
42:ab:4e:be:db:6d:09:56:d1:52:e9:f9:90:25:20:
af:7a:a9:c5:a7:54:88:e0:86:c0:63:0f:a3:c3:7b:
dd:31:e8:57:68:21:ab:5d:13:f4:c3:c0:ae:ba:88:
82:a4:42:9d:95:07:95:65:bb:8c:8c:4f:27:e5:07:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:A2:9B:D8:41:91:08:0B:E8:9D:30:54:8C:47:EA:15:E1:D4:A8
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:16:ac:b1:47:39:3e:a6:b1:84:6a:36:55:88:1f:27:aa:38:
e6:72:8d:e6:5f:80:e4:f5:6c:f4:a3:ae:c9:a7:bf:50:48:f0:
4c:4d:84:18:47:47:84:ea:8c:2d:f6:71:78:32:c0:bb:1d:01:
e9:75:5d:c8:c0:89:5f:88:b4:9b:dc:e4:8f:4c:96:b7:50:03:
13:e7:ad:8f:46:a8:fb:ad:84:e9:1a:5e:72:11:61:f0:b6:86:
96:d4:48:1b:e9:5f:39:28:07:92:29:08:78:26:e7:99:91:47:
10:9d:67:c9:66:5d:6a:51:2f:b5:d8:54:32:0c:8e:c0:ae:12:
1f:5c:e5:a0:14:d9:7f:81:4d:b0:22:8b:e5:cd:83:df:f7:d1:
2c:22:6f:92:52:34:b0:4d:b8:3a:f6:53:da:fd:bb:ef:b0:50:
fa:53:62:ef:6f:c0:8e:0b:3f:e4:f1:0e:4f:52:c4:b9:fb:6b:
17:1d:41:17:ee:2d:60:92:15:89:e6:02:80:6d:78:fe:e0:80:
91:d8:97:d0:a9:fa:2c:47:ad:6d:10:57:0d:e2:3d:a7:ca:cd:
10:c5:f7:fe:56:2d:ed:57:18:f1:d1:1a:f3:e6:ea:66:a2:ce:
b4:47:67:98:89:81:b3:6e:62:af:30:e8:af:14:de:6f:8f:ff:
9d:3d:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:55 2025 by rpki-client