Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: FyOIwZJmPaKLgukhBX5pGQQSmDJ2VK8AmqRG5/Ra1KQ=
Subject key identifier: B9:FB:B2:8D:1A:6B:FD:72:81:8F:3A:53:C5:08:A3:1E:9D:F3:FA:BC
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019A4F9965B16AA64145FD08B9D89B33474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: 54rvBbTjyALQFkPw6P9+uzZc8gPizxq+ErDKzOUJ65g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:65:b1:6a:a6:41:45:fd:08:b9:d8:9b:33:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=b9fbb28d1a6bfd72818f3a53c508a31e9df3fabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:5b:31:05:49:d5:3d:df:6a:65:cb:a7:c7:
3e:94:44:cf:d0:d0:fa:3a:b2:c3:46:60:9d:32:ec:
ea:c7:3f:1e:8e:ba:58:43:29:bb:d2:52:5e:70:92:
4b:59:8a:74:50:95:8e:b9:b0:a5:e8:50:4b:fe:18:
1f:e9:3d:83:f7:ad:a4:be:76:ba:f9:7c:a1:a3:8e:
8f:90:d9:f1:69:80:51:7b:7d:5a:09:0b:11:e9:91:
26:a2:e4:e3:78:0f:30:2e:95:31:3e:37:43:55:f4:
62:c1:1a:09:5b:b5:b8:75:dd:44:3c:0f:30:9e:c3:
10:c5:b9:d7:5c:75:36:51:1f:18:42:b3:1e:ee:0e:
98:01:30:4c:ae:96:bb:30:c8:7c:8b:b5:8b:86:93:
f1:8d:38:d7:c4:ed:6c:19:52:93:a3:8a:28:ff:98:
85:14:8a:93:c8:36:c9:35:33:25:5a:1a:ca:e8:7f:
97:61:31:c8:11:3b:ac:81:71:ca:ff:00:f5:31:7b:
bc:0c:08:9b:5e:37:90:4b:3f:c9:2d:4e:ac:43:5c:
3f:52:07:1c:8c:50:58:59:ac:15:00:d1:f9:aa:6d:
73:2b:ba:9e:69:63:72:13:9f:a5:bd:02:5a:6d:9b:
17:78:fa:e0:18:0b:7c:56:10:fe:be:7c:65:ff:d1:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:B2:8D:1A:6B:FD:72:81:8F:3A:53:C5:08:A3:1E:9D:F3:FA:BC
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:20:56:36:e1:26:e1:df:91:3d:f3:13:d7:26:bb:3b:d3:29:
bd:51:8a:3e:cc:d2:46:f3:41:bd:aa:af:17:3a:7f:84:77:4a:
64:68:36:c7:38:13:c3:36:83:80:16:60:05:e0:4d:3b:a9:db:
7f:bf:84:9a:42:e0:6a:fc:fd:67:5a:b4:82:ad:99:8a:41:a0:
14:5f:36:62:f4:c5:41:7c:68:b3:28:30:2f:6a:2b:79:54:19:
30:3e:01:7d:8d:55:c4:ac:30:dd:1b:27:2d:64:bb:1e:c5:e3:
d6:8e:7b:4c:fe:43:d5:6d:a6:11:f4:0d:bb:1e:ea:e2:bb:ea:
f4:06:ef:8b:d3:d5:b3:a5:e7:82:7b:de:7c:81:56:d6:20:bc:
53:fe:47:00:22:7f:5b:93:8d:52:50:4d:f4:75:a8:85:d5:21:
35:03:d5:e6:36:46:32:a4:fe:84:f6:28:e6:c3:0a:4f:1e:b6:
9e:59:3c:dd:e6:34:e5:08:07:1a:81:92:56:9a:bb:05:4a:30:
5c:06:2e:52:a9:e7:32:00:0e:85:f0:41:c7:b4:16:26:90:c3:
0d:2e:f7:2b:e9:ea:ac:ec:55:6c:c8:ea:30:e5:15:1e:d1:02:
83:32:b3:d6:57:12:90:35:d5:a8:9c:78:7a:60:0b:f4:32:2c:
92:c9:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:59 2025 by rpki-client