Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: GgNSXvUMYrnsJ5N2kbzqu3sSq7cGJTT+Jdnfa8vV6OM=
Subject key identifier: F3:7F:84:10:E7:9B:18:B3:3E:28:F6:23:81:1A:51:C2:B5:CF:7D:5E
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019A4DE1CAA8A9D763EDDDB1F5233929E6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 039F
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: AZz55zjU4yfJKtCIwHLg3vcyjiOwYh1HqTmORhh82AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ca:a8:a9:d7:63:ed:dd:b1:f5:23:39:29:e6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=f37f8410e79b18b33e28f623811a51c2b5cf7d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:03:7d:53:08:f1:82:34:c0:7b:ae:ba:ad:
65:39:2d:75:dc:d1:ab:b4:9e:d3:c7:fa:d3:70:b1:
a8:f9:e9:66:3a:e9:5e:4c:45:e0:d0:7a:3f:bd:4e:
4c:4d:58:ff:45:31:ec:dc:58:49:6e:cb:4d:c1:14:
12:44:ff:f7:ef:4d:1d:e3:81:3e:6b:30:09:cb:c6:
d8:96:1e:2d:da:8e:42:54:f4:d6:93:bc:96:35:df:
67:fe:41:b1:6b:2d:bc:41:e8:50:a9:e3:12:11:ab:
9f:2a:b6:54:d2:9d:cb:3c:9a:d5:27:0a:13:eb:54:
1c:97:1b:19:9c:b1:e3:cb:1a:df:36:6b:2c:47:80:
67:66:ee:d5:de:ed:60:50:7e:0a:da:66:2a:4a:35:
69:ad:81:d6:5c:b3:ff:bb:b3:87:ee:b0:94:04:f2:
df:a0:e8:df:60:c8:3a:57:9f:da:d6:91:46:f8:f2:
87:cf:44:90:1f:3b:c1:23:33:a0:05:28:88:3d:e1:
63:9a:84:81:72:18:d1:d5:33:8d:72:cb:ec:2f:e1:
3b:72:70:de:7a:8f:36:b4:5c:ec:5f:df:10:63:e2:
1e:37:d2:34:32:e7:ea:a2:16:a1:0b:a0:88:12:6a:
03:eb:b4:8e:c2:36:eb:04:bd:8b:3d:b9:e0:2c:bf:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:84:10:E7:9B:18:B3:3E:28:F6:23:81:1A:51:C2:B5:CF:7D:5E
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:99:25:3d:dd:e3:04:bf:62:9f:ea:18:3c:ca:ba:2d:64:
b4:d1:6d:39:59:58:5d:91:12:4c:36:b2:1b:32:d2:6c:3a:9c:
b2:40:75:23:e3:b3:68:16:a4:f9:74:ac:6a:58:78:e7:c7:53:
01:f8:cc:8e:24:f8:9f:7f:08:f0:21:d2:10:c8:41:e2:c0:9f:
e8:84:06:d2:b9:11:d0:16:98:c3:2b:ba:b8:1f:71:96:05:07:
06:2d:c8:2f:64:c3:aa:12:76:96:a0:ac:b0:d5:8c:35:db:16:
f4:c2:98:9f:bd:97:4c:dc:fe:d7:3b:8a:b0:67:8c:35:49:4d:
e9:fc:c0:a9:8f:34:cd:9b:25:98:be:08:53:a1:61:01:89:b2:
d6:38:d9:b9:26:11:76:9f:e3:cc:fb:75:01:84:7c:9c:9c:2e:
b6:9a:16:5e:d2:2e:e0:9b:e7:06:2c:49:72:7b:c6:1a:f0:a0:
52:bc:f3:53:aa:91:b7:29:90:be:b8:9e:f8:a3:d3:12:d0:89:
81:60:83:69:2b:1f:0a:2d:8f:68:8c:4b:eb:be:3b:af:92:f9:
2f:a9:4c:05:be:fe:fc:8d:00:59:bd:1a:aa:43:60:61:9c:2b:
5f:a0:f4:70:2a:e0:dd:1a:9e:d2:71:4e:90:03:04:de:21:76:
aa:8c:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:13 2025 by rpki-client