Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: S1eAq2MMwmy9cUwS4vPGYnVP98mmS/ZX6UF6Q7sUTqI=
Subject key identifier: EF:18:FE:3B:7F:CE:47:00:2C:0C:3A:57:05:28:0B:40:82:FF:AF:06
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 019A52D29AB003E522095BC7E2305EB03D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:02:05 +0000
Manifest this update: Wed 05 Nov 2025 07:02:05 +0000
Manifest next update: Thu 06 Nov 2025 07:02:05 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: Xx1M8jnGArIF9fH9bL3/gQyctIAeuTMUTVAbLWMx9o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:9a:b0:03:e5:22:09:5b:c7:e2:30:5e:b0:3d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Nov 5 07:02:05 2025 GMT
Not After : Nov 6 07:02:05 2025 GMT
Subject: CN=ef18fe3b7fce47002c0c3a5705280b4082ffaf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:52:3d:fa:f8:87:9a:2f:01:46:dd:ec:e4:
61:21:56:bf:ed:52:9c:e6:11:8a:31:09:0b:e8:d2:
eb:5f:6d:3b:3a:63:a4:ff:23:89:5a:ae:27:09:f8:
0b:05:53:be:a4:01:de:f4:05:5b:0f:35:2f:33:e5:
ef:52:d8:5f:67:fb:4d:24:79:e0:a9:43:c2:8a:e8:
93:b1:94:8b:17:46:50:e6:29:55:c8:34:df:70:c5:
13:55:02:cc:27:88:15:b0:96:a0:2e:0d:53:10:5d:
10:c3:32:57:0b:54:57:ac:ad:3f:94:a2:07:1e:48:
b3:6c:8e:31:c0:67:25:30:fd:49:43:1f:e6:69:d5:
6d:d5:1f:04:96:6b:66:b4:a9:bb:97:1f:1e:74:40:
08:ed:c9:a2:cb:b3:45:7f:c1:9e:89:98:da:9a:66:
4c:d7:3e:08:00:06:73:9f:d5:37:a2:52:93:6e:16:
fe:02:43:da:42:85:94:4e:cf:2e:1e:82:2e:5a:f5:
d2:97:97:1b:d9:98:d7:7d:e3:53:5a:05:4e:c3:9f:
0d:a9:ab:65:59:b0:d7:2e:77:a9:0e:5b:01:0c:7d:
5a:3c:c4:56:5b:f5:2e:b3:b3:c7:00:41:dc:5d:84:
71:be:28:04:b1:a8:dd:b9:ec:b9:88:11:9c:97:d4:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:FE:3B:7F:CE:47:00:2C:0C:3A:57:05:28:0B:40:82:FF:AF:06
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:e7:5b:fb:c5:82:3f:9e:cf:08:98:90:09:3b:db:7d:81:
d9:eb:58:66:e4:9a:e7:fc:61:10:f0:43:42:33:c4:82:7f:9b:
01:ae:65:5d:36:da:c2:7a:89:ac:7b:6a:4f:f8:d8:b3:33:1f:
47:a3:a5:9e:03:f7:19:b9:4b:e8:41:cc:09:34:14:c4:df:aa:
cc:b5:93:ad:53:4e:5b:bf:df:2f:80:85:a2:bd:30:69:52:82:
94:f5:da:0f:48:1d:f6:66:4e:f3:02:82:53:83:37:2b:1e:ea:
1e:4d:fc:1c:53:7c:7e:f9:ee:68:b8:8c:e0:49:cc:73:e2:06:
a6:8a:2b:87:01:e5:1e:3b:f4:76:ad:6e:16:b9:88:16:13:a9:
8f:2e:d4:42:2f:91:7b:a6:62:27:4c:10:47:ba:74:c0:67:c8:
5b:f2:7b:c4:7f:8c:be:bd:ca:4c:47:05:25:70:71:bc:48:ae:
5e:cf:2c:13:44:c5:80:33:60:3c:66:07:ff:2b:3b:ae:c3:a8:
e6:bd:a8:b5:6c:c0:4a:26:69:84:4c:c1:a6:66:e0:10:bf:5e:
cc:4a:2b:01:0d:f3:17:6b:68:dd:39:75:ca:c4:80:ef:53:df:
b7:7e:b8:9e:4a:35:e0:cc:ef:7e:e9:cc:65:5c:23:3f:5f:af:
27:48:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:17:35 2025 by rpki-client