Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: 4gt0z9DmLCpE9u/Gypuvaki2uuhCiuG5Y9JIgBpk7C0=
Subject key identifier: EA:0C:E0:C6:04:49:AD:03:7D:49:E6:4A:B5:B1:99:3C:B4:46:5E:41
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019A526359B871AB2F4083C02BBEF6600BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:33 +0000
Manifest this update: Wed 05 Nov 2025 05:00:33 +0000
Manifest next update: Thu 06 Nov 2025 05:00:33 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: 1WySyeRuIHqwxUVJ5pxarMtDOnpk+suiiEYrU0GwEQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:59:b8:71:ab:2f:40:83:c0:2b:be:f6:60:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Nov 5 05:00:33 2025 GMT
Not After : Nov 6 05:00:33 2025 GMT
Subject: CN=ea0ce0c60449ad037d49e64ab5b1993cb4465e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:80:7f:c6:ae:8c:9f:6d:f2:39:d5:cc:d8:
d1:9e:72:30:78:14:1b:a2:1f:e4:1a:9e:13:61:79:
66:d2:06:d2:35:56:c5:5c:ea:df:6e:d2:41:91:37:
b5:bf:62:e8:a5:a1:bb:e1:f5:63:f0:6b:a2:94:b5:
f8:74:68:fe:1c:d7:5c:59:99:b0:04:61:4b:4c:ef:
2f:d8:02:33:25:9a:b3:5d:fb:67:59:b3:2b:c0:42:
11:e4:72:c9:ec:71:0f:65:04:67:17:ac:32:00:e0:
ec:7a:eb:2b:84:55:d0:3b:3c:0b:0c:7e:ee:b2:39:
6b:87:e9:96:4f:9c:f2:a6:81:63:df:d9:25:1c:4d:
29:a6:a2:65:84:1f:7e:20:a7:f3:a7:b7:74:5e:76:
fa:14:07:70:b9:f6:5d:95:b8:3f:c4:44:c8:d7:d9:
01:72:b3:a1:7a:91:42:62:9c:b0:0c:22:d9:b7:d9:
80:6c:ef:6c:00:01:90:a4:70:25:ff:a5:f9:4a:fb:
ce:b7:bb:f3:f9:83:7d:51:ef:61:f4:2d:31:fa:f5:
45:b0:de:e0:c4:02:60:2d:29:b3:10:7f:3e:bd:24:
bb:3f:f1:d1:f9:ff:88:03:60:d7:df:ce:f2:1e:63:
27:5f:d4:b0:3e:46:85:44:fd:ce:78:3b:2e:8d:19:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:E0:C6:04:49:AD:03:7D:49:E6:4A:B5:B1:99:3C:B4:46:5E:41
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:70:a6:84:84:6a:2f:9e:8e:c9:be:4a:59:6b:1b:7c:16:39:
c3:4b:ef:8e:24:ba:bf:94:6d:5a:b2:cd:84:51:16:85:54:9b:
09:56:2c:ee:31:9e:ef:ee:bf:22:36:c5:7d:33:13:80:6c:5b:
d5:b4:ea:68:31:b7:93:2a:cf:10:0e:dc:77:20:20:82:7e:b9:
79:3e:27:6a:e3:fc:e2:aa:ef:66:c2:bb:be:35:dd:8a:51:76:
c2:65:d7:50:88:7a:4e:b9:cb:b5:12:7d:65:61:f3:2b:a4:2e:
59:66:58:e3:9d:f8:05:8f:67:88:b7:01:ea:bb:c5:1a:b0:47:
3e:6c:cf:be:cc:5d:20:42:e4:20:3c:f0:b5:3e:05:9b:4a:75:
f9:78:0f:9b:b2:5b:54:10:e2:6f:81:6a:8a:68:bb:08:bc:e0:
4e:92:c6:2f:f3:9b:f7:34:33:9c:ff:51:db:2b:d3:c8:33:ef:
b4:c7:d5:89:ba:c9:d4:b5:4f:ca:ef:50:21:cb:f8:61:7a:f1:
c4:a4:dc:60:3c:d7:a7:e5:f9:dc:b2:dc:27:c3:8f:7a:d8:8c:
70:be:0e:c8:a3:94:98:fc:e5:48:16:4d:4a:fc:0b:a5:29:46:
cf:e4:a8:a5:89:15:c9:8b:6e:f4:64:08:b8:ed:f0:c9:b4:9a:
89:b7:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:20 2025 by rpki-client