Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: mnS8S70tQWdcnd6VreAtUuL4yU7s2+l718+hSuNI6eM=
Subject key identifier: EB:C4:85:06:D0:FE:64:BE:CC:77:B5:89:E7:76:62:F0:19:49:C9:08
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019A4DE158A25E2AC1B862AF1F1CC5333760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: QZ2PAfLYGdF7jPk4LRQYm/ORFZxH9zLRguol0IkN0pQ=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:58:a2:5e:2a:c1:b8:62:af:1f:1c:c5:33:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=ebc48506d0fe64becc77b589e77662f01949c908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:62:48:a8:24:ff:fc:17:46:49:66:dd:65:
aa:a0:94:b3:d5:f0:cd:52:f2:fa:b1:8c:91:16:44:
f1:61:c9:a3:b5:67:af:3b:19:2e:45:49:5f:9d:4b:
86:2f:9b:67:b4:61:d3:66:e4:3b:6e:40:42:b7:cf:
51:93:94:36:87:9e:78:1a:11:86:00:d2:47:81:5b:
fc:b1:ed:4d:75:f2:42:f0:18:1c:f4:2a:b9:02:3f:
ae:8b:dd:2a:6a:4b:b7:82:50:8a:12:8d:66:75:8c:
0f:40:dc:8e:9b:36:cd:32:c8:6d:83:2e:92:04:71:
19:9b:2f:4b:91:0a:f6:53:eb:21:04:f5:30:7d:93:
74:34:5a:fb:d4:a0:55:8a:24:98:f2:68:d8:bb:e9:
b2:2b:0d:5b:68:b8:a1:c6:41:eb:9d:77:56:11:dc:
8a:c7:1f:2a:a6:a9:10:64:7d:bb:34:57:44:14:94:
2c:00:99:fb:00:a2:2d:db:43:65:62:a6:01:bc:9d:
4d:f1:1a:a5:08:f3:da:6c:d6:5f:3c:18:e6:ae:c5:
47:f6:9b:7f:32:e8:73:f9:6f:29:42:20:15:42:f7:
27:23:4f:98:76:cb:4c:68:7c:25:01:23:7b:89:eb:
4c:d0:66:e1:58:3b:b0:d8:39:73:4c:a0:52:66:c3:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:85:06:D0:FE:64:BE:CC:77:B5:89:E7:76:62:F0:19:49:C9:08
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:2f:1d:0c:eb:83:44:77:57:2a:f1:01:22:aa:e1:ab:aa:
a4:9b:3b:38:6d:06:f9:71:82:15:4a:44:28:c3:a7:ad:01:92:
1f:51:ff:3f:3a:90:65:6c:c0:b7:98:b1:d3:0b:cb:15:f2:78:
54:1e:70:14:54:b2:32:b6:0f:c0:f1:c0:b7:0c:60:14:92:f3:
d2:fa:29:34:e0:77:5d:9e:b1:b8:4c:91:27:01:c3:a5:4d:2b:
03:57:aa:1a:a1:a1:a0:3a:a3:98:39:11:4d:97:2b:ab:10:1d:
c1:d4:ab:4e:0b:0e:a6:fc:b2:ca:e0:61:5b:c6:f5:58:72:6c:
7f:35:23:3f:f5:07:1f:45:a3:99:9c:7b:e5:1f:1b:1b:ec:47:
47:b5:11:bc:f5:27:ce:92:9b:79:d4:e9:f7:60:09:fd:c6:78:
bc:67:26:ca:5d:22:9f:ae:28:a3:88:90:b3:03:87:49:6a:25:
0a:b3:85:90:e9:2d:52:ec:85:35:82:85:b8:fb:12:e6:5f:c4:
9c:2f:4a:fc:d3:59:3f:f8:11:26:21:64:11:ca:f7:fd:5c:e2:
ba:c7:50:82:25:06:be:2a:9e:46:d9:38:b8:1d:e0:eb:cc:88:
a1:84:06:99:66:2a:07:87:8d:eb:64:7e:4c:e7:3f:8c:81:1b:
b9:3c:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:26 2025 by rpki-client