Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: 0M2XPspZXeQIsokln/cwgrDEeUinmY2l7V8nGfKTQL0=
Subject key identifier: 5D:29:87:1E:12:07:E0:70:CB:A3:D1:53:0C:09:62:42:BC:7C:0E:0C
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 019A4E4F42A2912827A6A6EFEB4573C9FDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: K5hbC8oxHk7erhzYDbIFvnjO2gP+77emt43MqvKgNMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:42:a2:91:28:27:a6:a6:ef:eb:45:73:c9:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=5d29871e1207e070cba3d1530c096242bc7c0e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:fb:3f:e7:4c:ac:39:67:a8:28:cd:fe:b6:
83:f4:ce:18:63:9f:a3:23:fa:30:be:cb:78:49:da:
77:da:38:02:d6:6f:26:a7:26:49:20:20:55:1a:08:
3a:09:d6:84:5f:86:94:b2:df:50:df:89:c8:92:dd:
7e:2f:7f:62:da:74:a7:92:7c:1a:93:57:cc:8c:7e:
dc:c9:a8:b7:92:99:7f:84:d1:af:71:c2:dd:7e:c0:
c9:bc:6b:41:67:44:03:ed:69:2e:9e:f6:68:aa:e2:
82:6f:b7:c6:2e:5b:b5:65:d9:82:4e:a3:60:33:d1:
9f:db:c1:e6:e5:78:eb:01:51:f6:69:87:e3:38:9f:
fd:65:0c:31:47:a0:69:de:dc:28:d7:58:c2:cc:4c:
33:8c:e8:75:6d:7f:04:f2:c8:9e:43:36:9c:71:aa:
6b:46:ff:2c:0e:f1:98:00:c1:f0:bb:8c:18:5f:49:
49:95:21:cf:cc:ba:1d:61:1b:de:2f:67:32:0d:74:
89:76:3d:54:4d:02:cc:c4:a0:d1:24:2e:0b:79:92:
6d:40:f3:7a:d7:9e:e0:31:ea:d9:bf:de:12:fe:77:
7a:6d:7a:6c:bd:a0:22:cf:48:22:d7:6d:2d:92:8d:
50:fe:02:f1:da:fa:03:50:c5:12:b4:41:66:37:bf:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:87:1E:12:07:E0:70:CB:A3:D1:53:0C:09:62:42:BC:7C:0E:0C
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6e:65:6a:60:b2:7b:de:c3:6b:b5:f0:7b:96:6e:71:0c:2e:
0a:11:64:e7:8f:79:77:3e:56:b1:6c:66:80:e8:32:74:2f:02:
90:d3:d8:bd:3a:35:d6:92:4a:4e:52:76:db:4f:4f:af:1b:56:
fe:0a:aa:85:bc:d3:de:53:3f:6f:be:f8:35:1d:aa:84:46:86:
36:92:c4:67:2d:f8:2d:1b:e8:0a:f3:c3:bc:e2:cb:29:64:d2:
fc:35:47:e2:f4:45:dc:3b:25:f4:83:84:e9:33:ce:e7:a9:ad:
89:12:fc:b7:ff:a9:b5:e0:be:8d:5b:24:16:71:63:1d:a5:77:
7b:29:99:00:6e:5f:41:d0:dc:09:ea:63:a3:91:db:5d:44:b3:
46:d0:ba:07:41:59:03:ee:72:d7:8c:c1:5a:41:3c:47:99:50:
6a:04:0c:c5:52:e4:25:8d:3c:1b:ef:fa:6c:a6:f4:43:f0:42:
0f:c5:e3:e9:28:52:0c:e7:f2:9e:8c:83:24:19:4a:7d:0e:33:
9d:22:ad:61:e4:17:e3:c8:3b:94:e0:53:59:20:0e:d1:e5:30:
12:64:7d:a9:2e:23:df:d8:1e:20:9e:a8:74:a6:62:c4:a8:40:
2c:73:ff:18:6e:63:97:ba:e7:ce:4c:66:6c:b0:5a:b8:d9:59:
02:00:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:12 2025 by rpki-client