Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: RnG0eS7RRvKIphIeNXo+1qLWqGQuXrVwf14MSMWAlhA=
Subject key identifier: 5D:B5:9E:59:65:70:46:01:EB:B2:7F:3F:FB:2B:57:41:87:D1:9A:FF
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 019A4E190B9073E56C99347DA29CE46557E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0823
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: veAEv2DG/kuiQC+mUxP9+xeabHn+MTsL7phfLAoggRI=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0b:90:73:e5:6c:99:34:7d:a2:9c:e4:65:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=5db59e5965704601ebb27f3ffb2b574187d19aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:b6:f4:52:f7:48:87:8f:16:ee:01:2d:4c:
25:45:6e:04:33:ae:71:ca:1b:04:fa:e3:1e:ea:bb:
cd:e6:12:00:c8:f9:32:76:76:27:75:c6:e3:30:0b:
06:ed:c8:f5:96:fe:8c:4b:9c:bb:11:20:01:68:b5:
ca:2a:8a:4b:93:ea:8f:1b:b6:ce:9d:67:ee:7d:be:
62:25:d5:d5:2b:8c:60:47:3b:ec:75:02:6e:f8:cb:
e1:e3:2c:a4:3c:ec:f9:a1:75:84:90:9a:ea:47:6e:
dc:57:0f:14:20:b9:89:a0:09:41:fb:d7:e3:0e:31:
77:8d:fa:7e:b9:57:2c:15:7a:84:63:56:a0:1f:4f:
02:69:e7:79:62:fd:c8:10:da:b6:bf:22:cd:be:03:
d9:47:f0:c5:9c:97:3b:9a:0f:e3:54:73:d5:d0:38:
61:f2:fa:3c:0b:bc:11:bb:5a:74:f8:e2:d0:e9:3d:
be:4d:bb:7b:dc:67:6a:f6:10:eb:76:48:33:0e:9d:
9a:59:6a:9b:66:b7:56:27:fd:4d:b1:ff:03:87:63:
e3:b6:b4:d2:d9:db:c0:f3:f5:98:8b:39:a2:8a:c2:
b5:e0:73:64:a6:18:76:7e:9f:14:cd:28:8d:0a:9c:
56:d3:6e:4a:0f:c0:91:20:45:24:2a:4a:44:67:32:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:9E:59:65:70:46:01:EB:B2:7F:3F:FB:2B:57:41:87:D1:9A:FF
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:26:db:9c:79:2f:ca:e2:dd:71:7a:d1:7d:2c:ce:bf:45:
10:6f:7b:d4:e7:a5:f8:8d:ff:27:c4:7b:02:7a:a2:61:f8:88:
a4:60:f6:c1:90:18:f1:63:2b:6f:09:b7:2b:1a:a6:ee:14:91:
23:e1:25:32:24:60:e8:f1:14:53:6b:56:8e:04:4a:db:e1:60:
9e:7c:fb:e8:02:b0:96:d6:9a:d1:2e:93:8d:22:82:14:91:2c:
7e:47:5a:30:db:40:43:ed:c1:7e:a7:b4:e6:c5:18:50:fe:71:
29:06:f9:15:62:17:12:a5:97:e7:27:6c:af:54:be:09:23:d5:
cc:c2:ae:84:9f:88:d4:d7:44:07:eb:66:8f:fd:b8:7a:76:b0:
e3:56:5f:c1:ae:d7:c8:d0:04:b8:c8:6a:ad:19:db:92:74:26:
e9:0b:f9:54:f4:0e:cc:15:d8:a6:15:db:99:10:2a:f0:cc:be:
4f:80:96:88:82:d9:80:84:80:ae:0f:5e:35:cb:00:f8:4d:e9:
71:5f:43:44:cd:ba:89:a5:ec:6b:ae:86:b5:bf:85:06:79:2b:
9c:40:ce:f3:9a:6f:90:d9:21:20:f7:77:e2:36:8a:d3:b3:5a:
0a:e5:08:53:cd:5c:3a:e9:0b:c4:ab:d3:73:e7:e4:85:01:24:
ab:89:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:19 2025 by rpki-client