Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: HogbUr/glNUIx/1mxQ9y58UtrpfV9us437kBpY8R9sc=
Subject key identifier: FA:21:2B:FC:2D:C3:BC:50:BC:45:32:14:94:FC:67:08:1E:92:78:19
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 019A4D3D3132AB4399484E5DDCAE762759D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 0386
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: VgkNO8itGjeCKCeC67MHsIJ6G6R0dlb6uhX603LrLF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:31:32:ab:43:99:48:4e:5d:dc:ae:76:27:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=fa212bfc2dc3bc50bc45321494fc67081e927819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:b5:e4:f5:cc:d2:e8:60:be:f2:91:12:cc:
73:3c:c5:39:72:a9:0a:4b:cb:db:04:c1:93:ee:5e:
0f:89:21:d0:43:37:8c:76:4a:4f:9f:87:25:b7:81:
ae:99:89:d2:b3:bd:ef:11:07:38:43:9f:2b:5b:d8:
2a:d9:cc:ba:61:da:87:71:1e:4b:f7:a0:2f:82:8e:
94:8e:a7:45:db:6c:2d:15:12:0f:b0:9f:d5:d6:80:
da:e4:63:5e:cd:d6:47:39:8b:82:97:87:7e:c3:d6:
e1:f8:da:db:14:92:99:6d:45:ab:2d:17:58:e7:7a:
9b:7c:04:97:bd:15:51:f6:62:80:0f:fe:a5:f9:7e:
7b:f8:7d:14:5b:19:cb:bf:bc:d0:62:f9:d6:ac:4f:
de:88:c6:77:3b:98:4f:20:ff:eb:bf:cd:20:d9:f9:
88:6c:93:47:0d:fa:c7:ef:c6:ad:ef:9a:61:c9:5c:
84:02:29:d5:d1:97:8f:03:b2:36:82:72:c2:b9:9f:
78:9f:3f:2a:38:ef:ab:89:d6:48:d0:c5:ea:2e:cf:
b8:53:cd:9b:c0:c9:69:a5:94:22:fc:68:90:e1:2f:
04:ae:a3:19:e3:c4:9e:51:59:54:0a:99:c9:4d:e7:
a0:d1:38:f4:f9:e9:17:06:b8:dc:91:79:4b:a1:41:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:2B:FC:2D:C3:BC:50:BC:45:32:14:94:FC:67:08:1E:92:78:19
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5b:3c:90:71:bd:36:5f:6e:c0:09:2b:e4:b3:21:94:31:4d:
8c:17:80:ea:4b:2f:73:f7:92:49:dd:4c:b4:92:a8:3e:33:30:
e0:f5:d2:62:1c:b7:5e:d9:8b:e3:79:50:eb:b6:7e:e9:87:a0:
1e:2e:e2:90:91:aa:cd:af:f5:a6:62:77:9a:bd:b5:d6:76:92:
34:fd:68:9b:65:6a:69:e4:90:c0:93:ad:51:4e:d3:9b:d5:4b:
e4:25:4f:aa:b2:5b:cb:a6:25:9b:8c:d0:c3:b9:f6:56:cb:40:
1d:c1:29:71:8f:be:bf:b6:55:f8:86:67:ac:d3:9f:ad:29:62:
fb:21:a6:5a:da:ba:64:19:95:89:4e:dc:4b:a9:2b:39:3f:40:
a5:d7:2e:bd:b3:b5:0d:11:11:e5:06:84:b3:58:c9:9e:ff:ec:
d4:dd:97:57:84:93:76:2d:13:ab:57:c3:a1:b9:9a:9e:82:43:
47:f5:b8:64:bb:1c:96:04:6a:83:9f:30:2e:ee:4d:7b:2f:b3:
bf:5b:76:00:f3:8e:5e:23:b1:d2:73:89:5b:9e:62:39:45:8c:
a2:59:40:3a:29:c9:20:73:38:93:39:42:9a:f7:bb:86:08:d6:
50:2a:fe:01:31:28:fa:1c:3e:cb:41:ff:cb:c4:35:70:11:68:
cd:93:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:52 2025 by rpki-client